CVE-2020-25214: Undefined Security Weakness

In the client in Overwolf 0.149.2.30, a channel can be accessed or influenced by an actor that is not an endpoint...

CVE-2020-15932

Overwolf before 0.149.2.30 mishandles Symbolic Links during updates, causing elevation of privileges...

CVE-2020-15932

Overwolf before 0.149.2.30 mishandles Symbolic Links during updates, causing elevation of privileges...

Privilege escalation

Overwolf before 0.149.2.30 mishandles Symbolic Links during updates, causing elevation of privileges...

CVE-2020-15932

CVE-2020-15932 concerns Overwolf versions before 0.149.2.30, where updates mishandle symbolic links, leading to elevation of privileges. Public documents consistently describe this as a privilege-escalation issue affecting the updater process. The exact vulnerable component is the update mechanis...

CVE-2020-15932

Overwolf before 0.149.2.30 mishandles Symbolic Links during updates, causing elevation of privileges...

CVE-2020-15932: Improper Link Resolution Before File Access

Overwolf before 0.149.2.30 mishandles Symbolic Links during updates, causing elevation of privileges...

overwolf.com XSS vulnerability

Vulnerable URL: http://www.overwolf.com/Register/Unsubscribed.html?Email=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E=a7395da2bd6e4f6a537df7d24414a570 Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 08:47 GMT...