Read the docs
TI-2024-07259 Aliases CVE-2024-7834GHSA-4j5r-p7p6-v9j4

Local privilege escalation in Overwolf

Priority LOW 36CWE-427Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-427.

Summary

A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-writeable folder in SYSTEM context on launch. This allows an attacker with unprivileged access to the system to run arbitrary code with SYSTEM privileges by placing a malicious .dll file in the respective location.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.003 22nd percentileScored 2026-11-07
Fix Fixed Overwolf (Overwolf): 250.1.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OverwolfOverwolfbefore 250.1.1250.1.1Patch availableCNA
  • Overwolf VendorOverwolf Affected before 250.1.1 Fixed in 250.1.1 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:overwolf:overwolf:*:*:*:*:*:*:*:*before 250.1.1VulnerableOverwolf
  • cpe:2.3:a:overwolf:overwolf:*:*:*:*:*:*:*:* Versions before 250.1.1 Vulnerable ·Overwolf

Remediation

  • Fix · CNA Overwolf (Overwolf) Fixed in 250.1.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-7834
  2. 2026-10-03 Alias added: GHSA-4j5r-p7p6-v9j4

References

Advisory 1

  • TI-2021-12903 Overwolf Client 0.169.0.22 allows XSS, with resultant Remote Code Execution, via an overwolfstore:// URL. CVSS 3.1CRITICAL 9.6
  • TI-2020-12545 Overwolf before 0.149.2.30 mishandles Symbolic Links during updates, causing elevation of privileges. CVSS 3.1HIGH 8.8
  • TI-2020-15455 In the client in Overwolf 0.149.2.30, a channel can be accessed or influenced by an actor that is not an endpoint. CVSS 3.1HIGH 8.1
  • TI-2021-03952 Uncontrolled search path in Overwolf The Installer of Overwolf CVSS 3.1HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences