CVE-2024-7834 — Local privilege escalation in Overwolf

CVE-2024-7834

Local privilege escalation in Overwolf PUBLISHED

Description (CNA)

A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-writeable folder in SYSTEM context on launch. This allows an attacker with unprivileged access to the system to run arbitrary code with SYSTEM privileges by placing a malicious .dll file in the respective location.

Affected (CNA)

Vendor / product	Versions
Overwolf / Overwolf	affected 0 before 250.1.1

CWE

CWE-427

References

https://www.cirosec.de/sa/sa-2024-004

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.