7.8
High
CVE-2026-58611 Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally
Description
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Xbox Gaming Services 19.0 | 19.0.0.0 → < 37.114.10001.0 | 37.114.10001.0 |
Other CVEs of Xbox Gaming Services
The 5 CVEs of Xbox Gaming Services →
CVE-2025-59281
Improper link resolution before file access ('link following') in XBox Gaming Services allows an authorized attacker…
7.8
High
CVE-2025-55245
Improper link resolution before file access ('link following') in Xbox allows an authorized attacker to elevate…
7.8
High
CVE-2025-55242
Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose…
6.5
Medium
CVE-2024-28916
Xbox Gaming Services Elevation of Privilege Vulnerability
8.8
High