6.5
Medium
CVE-2025-55242 Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose…
Description
Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose information over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Xbox Gaming Services | Versions not published |
Other CVEs of Xbox Gaming Services
The 5 CVEs of Xbox Gaming Services →
CVE-2026-58611
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally
7.8
High
CVE-2025-59281
Improper link resolution before file access ('link following') in XBox Gaming Services allows an authorized attacker…
7.8
High
CVE-2025-55245
Improper link resolution before file access ('link following') in Xbox allows an authorized attacker to elevate…
7.8
High
CVE-2024-28916
Xbox Gaming Services Elevation of Privilege Vulnerability
8.8
High