CVE-2017-14748

MEDIUM 5.3CVE-2017-14748 · Published 26/09/2017 · updated 17/06/2026

In short

CVE-2017-14748 is a MEDIUM (CVSS 5.3) vulnerability affecting overwatch (blizzard).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
overwatch blizzard	`= 1.15.0.2`	No fix yet

Description

Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause a denial of service (season bans and SR losses for other users) by leaving a competitive match at a specific time during the initial loading of that match.

References

securityfocus.com/bid/101087 · Third Party Advisory
us.battle.net/forums/en/overwatch/topic/20759216554 · Third Party Advisory
reddit.com/r/Overwatch/comments/72euqx/theres_a_bug_out_there_that_can_instantly · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free