371 matches found
XboxSeries
Xbox Series: Internal Architecture Research Field| Value ---|--- Date| March 9-12, 2026 + July 7-?, 2026 Hardware| Xbox Series S Codename: Lockhart OS Build| 26100.7010.amd64fre.xbflt2602ge.260212-1010 + 26100.8561.amd64fre.xbflt2606ge.260609-2200 Access Method| Dev Mode + SSH + REST API + NTFS...
collateral-damage
Collateral Damage Collateral Damage is a kernel exploit for Xbox SystemOS using CVE-2024-30088. It targets Xbox One and Xbox Series consoles running kernel versions 25398.4478, 25398.4908, and 25398.4909. The initial entrypoint is via the Game Script UWP application. The first stage payloads, PE...
CVE-2026-78455
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack...
CVE-2026-58611
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
CVE-2026-78455
CVE-2026-78455 is an out-of-bounds read in Xbox that allows an unauthorized attacker with physical access to disclose information (high confidentiality impact). The attack requires user interaction but no prior privileges. CVSS v3.1 scores it 4.3 (MEDIUM) with a physical attack vector. CISA's SSV...
EUVD-2026-73806
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack...
EUVD-2026-73368
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
CVE-2026-58611
CVE-2026-58611 is an improper authorization vulnerability in Xbox Gaming Services that allows an already-authorized (low-privilege) attacker to elevate privileges locally , resulting in high impact to confidentiality, integrity, and availability. The assigned CVSS 3.1 score is 7.8 (HIGH) with a l...
Xbox Gaming Services Elevation of Privilege Vulnerability
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
Xbox Information Disclosure Vulnerability
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack...
CVE-2026-58611: Improper Authorization
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
CVE-2026-78455: Out-of-bounds Read
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack...
PT-2026-87201
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
PT-2026-87999
šØ CVE-2026-78455 Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack. š@cveNotify...
KLA91262 PE vulnerabilities in Microsoft Apps
Privilege escalation vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Xbox Gaming Services can be exploited remotely to gain privileges. 2...
CVE-2022-51016 PocketMine-MP 3.x before 3.27.0 Authentication Bypass via Login Replay
PocketMine-MP 3.x before 3.27.0 does not implement Minecraft Bedrock protocol encryption, so the server cannot verify that a connecting client possesses the private key corresponding to its login token. An attacker who captures a valid login from another player's session for example by tricking t...
CVE-2022-51016: Authentication Bypass by Capture-replay
PocketMine-MP 3.x before 3.27.0 does not implement Minecraft Bedrock protocol encryption, so the server cannot verify that a connecting client possesses the private key corresponding to its login token. An attacker who captures a valid login from another player's session for example by tricking t...
PT-2026-86778
PocketMine-MP 3.x before 3.27.0 does not implement Minecraft Bedrock protocol encryption, so the server cannot verify that a connecting client possesses the private key corresponding to its login token. An attacker who captures a valid login from another player's session for example by tricking t...
Malicious Package
Overview xbox-promo-checker-api is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...