Description
Improper link resolution before file access ('link following') in XBox Gaming Services allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Xbox Gaming Services | 19.0.0.0 – < 31.105.17001.0 | 31.105.17001.0 |
Advisories 2
- WID-SEC-2025-2277 Microsoft Apps: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 14, 2025
- MSRC-CVE-2025-59281 Xbox Gaming Services Elevation of Privilege Vulnerability Microsoft Security Response Center · Oct 14, 2025
References
- Xbox Gaming Services Elevation of Privilege Vulnerability vendor-advisory patch