CVE-2024-7834: Overwolf

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-writeable folder in SYSTEM context on launch. This allows an attacker with unprivileged access to the system to run arbitrary code with SYSTEM privileges by placing a malicious .dll file in the respective location.

Affected products

• Overwolf Overwolf: before 250.1.1 (fixed in 250.1.1)

Published 2024-09-04. Last modified 2026-06-17.