Description
Improper link resolution before file access ('link following') in Xbox allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Xbox Gaming Services | 19.0.0.0 – < 30.104.13001.0. | 30.104.13001.0. |
Advisories 1
- MSRC-CVE-2025-55245 Xbox Gaming Services Elevation of Privilege Vulnerability Microsoft Security Response Center · Sep 9, 2025
References
- Xbox Gaming Services Elevation of Privilege Vulnerability vendor-advisory patch