52 matches found
CVE-2021-33501
Overwolf Client 0.169.0.22 allows XSS, with resultant Remote Code Execution, via an overwolfstore:// URL...
CVE-2021-33501
Overwolf Client 0.169.0.22 is affected by an XSS vulnerability that can lead to Remote Code Execution via an overwolfstore:// URL. The issue is documented across multiple sources (CVE-2021-33501, Red Hat advisory, NVD entry, etc.), consistently describing an XSS vector that enables RCE. The conne...
EUVD-2021-20202
Overwolf Client 0.169.0.22 allows XSS, with resultant Remote Code Execution, via an overwolfstore:// URL...
CVE-2021-33501: Improper Neutralization of Input During Web Page Generation
Overwolf Client 0.169.0.22 allows XSS, with resultant Remote Code Execution, via an overwolfstore:// URL...
Overwolf Cross-Site Scripting Vulnerability
Overwolf is a framework from the Israeli company Overwolf that supports building games using HTML and JavaScript. A security vulnerability exists in Overwolf Client 0.169.0.22, which originates from overwolfstore: UR can L generate remote code execution...
PT-2021-20161
Name of the Vulnerable Software and Affected Versions Overwolf Client version 0.169.0.22 Description The issue allows for XSS, resulting in Remote Code Execution, via an overwolfstore:// URL. There is no information provided about the estimated number of potentially affected devices worldwide or...
CVE-2021-20726
Untrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory...
CVE-2021-20726
Untrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory...
Design/Logic Flaw
Untrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory...
CVE-2021-20726
Untrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory...
CVE-2021-20726
Untrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory...
CVE-2021-20726
The CVE-2021-20726 entry concerns Overwolf’s Installer. A CWE-427-like issue in the DLL search path allows an attacker to place a Trojan DLL in the installer directory and execute arbitrary code with the user’s privileges, affecting The Installer of Overwolf up to version 2.168.0.n and earlier. D...
CVE-2021-20726: Uncontrolled Search Path Element
Untrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory...
PT-2021-14183
Name of the Vulnerable Software and Affected Versions: Overwolf versions 2.168.0.n and earlier Description: The issue allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory. This is...
Installer of Overwolf may insecurely load Dynamic Link Libraries
Overview Overwolf is a software framework for creating applications for games. The Overwolf Installer contains an issue with the DLL search path CWE-427, which may lead to insecurely loading Dynamic Link Libraries stored in the same directory where the installer resides. Shogo kumamaru of LAC Co....
Overwolf code-related vulnerabilities
Overwolf is a framework from the Israeli company Overwolf that supports building games using HTML and JavaScript. Overwolf Installer 2.168.0 suffers from a code issue vulnerability that stems from the application loading DLL libraries in an insecure manner. A remote attacker could exploit the...
JVN#78254777: Installer of Overwolf may insecurely load Dynamic Link Libraries
Overwolf is a software framework for creating applications for games. The Overwolf Installer contains an issue with the DLL search path CWE-427, which may lead to insecurely loading Dynamic Link Libraries stored in the same directory where the installer resides. Impact Arbitrary code may be...
CVE-2020-25214
In the client in Overwolf 0.149.2.30, a channel can be accessed or influenced by an actor that is not an endpoint...