CVE-2021-20726

7.8 highEPSS 0.3%

High (7.8) in overwolf overwolf. EPSS 0.3% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2021-05-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

overwolf:overwolf

References

https://jvn.jp/en/jp/JVN78254777/index.html
https://www.overwolf.com/
https://jvn.jp/en/jp/JVN78254777/index.html
https://www.overwolf.com/

Check your stack JSON