What is CVE-2021-20726?

CVE-2021-20726 is a high-severity vulnerability in Overwolf, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2021-05-24.

How severe is CVE-2021-20726?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Overwolf

CVE-2021-20726

Untrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory.

EPSS: 0.003 (21.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Overwolf
Overwolf Ltd. The Installer Of — versions 2.168.0.n and earlier

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

vultures@jpcert.or.jp (x_refsource_MISC, Vendor Advisory)
vultures@jpcert.or.jp (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-20726?: CVE-2021-20726 is a high-severity vulnerability in Overwolf, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2021-05-24.
How severe is CVE-2021-20726?: High severity. CVSS v3 base score is 7.8 out of 10.