xbox_gaming_services vulnerabilities
CVEs whose affected-version data names the xbox_gaming_services package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-58611High· 7.8Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally.
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally.
▾ Twilightmicrosoft · xbox_gaming_servicesEPSS 0.31%via NVD
CVE-2025-59281High· 7.8Improper link resolution before file access ('link following') in XBox Gaming Services allows an authorized attacker to elevate privileges locally.
Improper link resolution before file access ('link following') in XBox Gaming Services allows an authorized attacker to elevate privileges locally.
▾ Twilightmicrosoft · xbox_gaming_servicesEPSS 0.38%via NVD
CVE-2025-55242Medium· 6.5Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose information over a network.
Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose information over a network.
▾ Sunlitmicrosoft · xbox_gaming_servicesEPSS 0.81%via NVD