7.8
High
CVE-2025-59281 Improper link resolution before file access ('link following') in XBox Gaming Services allows an authorized attacker…
Description
Improper link resolution before file access ('link following') in XBox Gaming Services allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Xbox Gaming Services 19.0 | 19.0.0.0 → < 31.105.17001.0 | 31.105.17001.0 |
References
- Xbox Gaming Services Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Xbox Gaming Services
The 5 CVEs of Xbox Gaming Services →
CVE-2026-58611
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally
7.8
High
CVE-2025-55245
Improper link resolution before file access ('link following') in Xbox allows an authorized attacker to elevate…
7.8
High
CVE-2025-55242
Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose…
6.5
Medium
CVE-2024-28916
Xbox Gaming Services Elevation of Privilege Vulnerability
8.8
High