Blizzard

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Blizzard records in CISA KEV

No Blizzard vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Battle.net 2 records LOW Overwatch 1 record LOW Warcraft 3 The Frozen Throne 1 record MEDIUM

Records

5 records

TI-2009-04524 CVE-2009-4768 · GHSA-8cw5-3844-5574

Unspecified vulnerability in the JASS script interpreter in Warcraft III: The Frozen…

MEDIUM 46

Unspecified vulnerability in the JASS script interpreter in Warcraft III: The Frozen Throne 1.24b and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted custom map.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03368 Published 2010-04-20 No fix listed CWE-94

TI-2025-20667 CVE-2025-27997 · GHSA-9mgg-ww23-jfhc

An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via…

LOW 38

An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into the C:\ProgramData directory.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00181 Published 2025-05-21 No fix listed CWE-427

TI-2020-16649 CVE-2020-27383 · GHSA-mqmr-qq67-c6hj

Battle.net.exe in Battle.Net 1.27.1.12428 suffers from an elevation of privileges…

LOW 34

Battle.net.exe in Battle.Net 1.27.1.12428 suffers from an elevation of privileges vulnerability which can be used by an "Authenticated User" to modify the existing executable file with a binary of his choice.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0032 Published 2021-06-09 No fix listed CWE-281

TI-2025-01555 CVE-2025-1804 · GHSA-6q3q-6x5m-34q7

Blizzard Battle.Net profapi.dll uncontrolled search path

LOW 33

A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical.

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00182 Published 2025-03-01 No fix listed CWE-426

TI-2017-10810 CVE-2017-14748 · GHSA-2jmv-57qj-jwg6

Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause…

LOW 26

Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause a denial of service (season bans and SR losses for other users) by leaving a competitive match at a specific time during the initia…

CVSS 3.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01073 Published 2017-09-26 No fix listed CWE-362

Open these records in search →

Critical	1
High	3
Medium	1
Low	0
No CVSS	0