CVE-2017-14748

Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause a denial of service (season bans and SR losses for other users) by leaving a competitive match at a specific time during the initial loading of that match.

• CWE-362

• http://www.securityfocus.com/bid/101087Third Party Advisory, VDB Entry
• https://us.battle.net/forums/en/overwatch/topic/20759216554Third Party Advisory
• https://www.reddit.com/r/Overwatch/comments/72euqx/theres_a_bug_out_there_that_can_instantly/Third Party Advisory
• http://www.securityfocus.com/bid/101087Third Party Advisory, VDB Entry
• https://us.battle.net/forums/en/overwatch/topic/20759216554Third Party Advisory
• https://www.reddit.com/r/Overwatch/comments/72euqx/theres_a_bug_out_there_that_can_instantly/Third Party Advisory

Published

Sep 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14741The ReadCAPTIONImage function in coders/caption.c in ImageMa…
• CVE-2017-14742Buffer overflow in LabF nfsAxe FTP client 3.7 allows an atta…9.8
• CVE-2017-14743Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticate…
• CVE-2017-14744UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME e…
• CVE-2017-14745The *_get_synthetic_symtab functions in the Binary File Desc…
• CVE-2017-14746Use-after-free vulnerability in Samba 4.x before 4.7.3 allow…9.8
• CVE-2017-14749JerryScript 1.0 allows remote attackers to cause a denial of…
• CVE-2017-14751The Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, r…
• CVE-2017-14752Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 be…
• CVE-2017-14753Cross-site scripting (XSS) vulnerability in the EyesOfNetwor…
• CVE-2017-14754OpenText Document Sciences xPression (formerly EMC Document …
• CVE-2017-14755OpenText Document Sciences xPression (formerly EMC Document …