What is CVE-2021-20726?

CVE-2021-20726 is a high-severity vulnerability in Overwolf, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2021-05-24.

How severe is CVE-2021-20726?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Overwolf

CVE-2021-20726

Untrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory.

Published 2021-05-24 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.003 (19.7th percentile), scored 2026-10-01.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 20th percentile — 19.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000

Affected products

Overwolf
Overwolf Ltd. The Installer Of — versions 2.168.0.n and earlier

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

www.overwolf.com/ (Vendor Advisory)
jvn.jp/en/jp/JVN78254777/index.html (Third Party Advisory)

Frequently asked questions

What is CVE-2021-20726?: CVE-2021-20726 is a high-severity vulnerability in Overwolf, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2021-05-24.
How severe is CVE-2021-20726?: High severity. CVSS v3 base score is 7.8 out of 10.