CVE-2024-7834

CVE-2024-7834 is a local privilege escalation vulnerability affecting Overwolf, where the application loads and executes DLLs from a user-writable folder in SYSTEM context upon launch. This allows an unprivileged attacker to achieve SYSTEM privileges by placing a malicious DLL in the designated location. The vulnerability has a CVSS score of 7.8 (HIGH), indicating a local attack vector with low complexity, requiring user interaction, and leading to high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.