Skip to main content

Blizzard

2 CVEs vendor

Monthly

CVE-2025-27997 May 21, 16:15 HIGH This Week

An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into the C:\ProgramData directory. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Battle Net Blizzard
NVD GitHub
CVSS 3.1
8.4
EPSS
0.1%
CVE-2017-14748 Sep 26, 17:29 MEDIUM This Month

Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause a denial of service (season bans and SR losses for other users) by leaving a competitive match at a specific. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Race Condition Overwatch Blizzard
NVD
CVSS 3.0
5.3
EPSS
0.4%
EPSS 0% CVSS 8.4
HIGH This Week

An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into the C:\ProgramData directory. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Battle Net Blizzard
NVD GitHub
EPSS 0% CVSS 5.3
MEDIUM This Month

Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause a denial of service (season bans and SR losses for other users) by leaving a competitive match at a specific. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Race Condition Overwatch +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy