Summary
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
How could an attacker exploit the vulnerability?
An attacker could create a specially crafted game scenario file and convince a user to open it, which allows the file to write content outside the intended game directory. By doing this, the attacker can place malicious files in unexpected locations, potentially enabling code to run on the affected system.
Security updates
101.103.46651.0 — https://www.ageofempires.com/news/age-of-empires-ii-definitive-edition-update-177723/
Vulnerabilities 1
-
High 8.8
Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability
Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network.
Revision history
-
#1
Information published.
References
-
CVE-2026-50663 Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50663
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss