7.8
High
CVE-2025-55245 Improper link resolution before file access ('link following') in Xbox allows an authorized attacker to elevate…
Description
Improper link resolution before file access ('link following') in Xbox allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Xbox Gaming Services 19.0 | 19.0.0.0 → latest | No fix stated |
Other CVEs of Xbox Gaming Services
The 5 CVEs of Xbox Gaming Services →
CVE-2026-58611
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally
7.8
High
CVE-2025-59281
Improper link resolution before file access ('link following') in XBox Gaming Services allows an authorized attacker…
7.8
High
CVE-2025-55242
Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose…
6.5
Medium
CVE-2024-28916
Xbox Gaming Services Elevation of Privilege Vulnerability
8.8
High