7.8
High
CVE-2025-59281 Improper link resolution before file access ('link following') in XBox Gaming Services allows an authorized attacker…
Description
Improper link resolution before file access ('link following') in XBox Gaming Services allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Xbox Gaming Services 19.0 | 19.0.0.0 → < 31.105.17001.0 | 31.105.17001.0 |
Other CVEs of Xbox Gaming Services
The 5 CVEs of Xbox Gaming Services →
CVE-2026-58611
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally
7.8
High
CVE-2025-55245
Improper link resolution before file access ('link following') in Xbox allows an authorized attacker to elevate…
7.8
High
CVE-2025-55242
Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose…
6.5
Medium
CVE-2024-28916
Xbox Gaming Services Elevation of Privilege Vulnerability
8.8
High