CVE-2025-53768

Use after free in Xbox allows an authorized attacker to elevate privileges locally...

EUVD-2025-34366

Improper link resolution before file access 'link following' in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

EUVD-2025-34348

Use after free in Xbox allows an authorized attacker to elevate privileges locally...

CVE-2025-59281

Improper link resolution before file access 'link following' in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

CVE-2025-59281

Improper link resolution before file access 'link following' in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

CVE-2025-53768

Use after free in Xbox allows an authorized attacker to elevate privileges locally...

CVE-2025-53768

Use after free in Xbox allows an authorized attacker to elevate privileges locally...

CVE-2025-53768 Xbox IStorageService Elevation of Privilege Vulnerability

...

CVE-2025-53768

CVE-2025-53768 corresponds to an Xbox-related vulnerability in the IStorageService component, described as a use-after-free that enables an authorized attacker to elevate privileges locally. The connected NCSC advisory references this CVE as an Xbox issue with impact class “Obtaining Increased Ri...

CVE-2025-53768 Xbox IStorageService Elevation of Privilege Vulnerability

...

CVE-2025-59281 Xbox Gaming Services Elevation of Privilege Vulnerability

...

CVE-2025-59281

Xbox Gaming Services suffers an elevation of privilege via improper link resolution before file access ("link following"). An authorized local attacker can escalate to higher privileges. CVSSv3.1 base score 7.8 (HIGH); attack vector LOCAL, privileges required LOW, no user interaction. Remediation...

CVE-2025-59281 Xbox Gaming Services Elevation of Privilege Vulnerability

...

Xbox IStorageService Elevation of Privilege Vulnerability

Use after free in Xbox allows an authorized attacker to elevate privileges locally...

Xbox Gaming Services Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

Microsoft Xbox Gaming Services 后置链接漏洞

Microsoft Xbox Gaming Services is an Xbox-related gaming service from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Xbox Gaming Services, which stems from a vulnerability that can be exploited by an attacker to elevate privileges...

KLA89278 PE vulnerability in Microsoft Apps

An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-59281 Related products Xbox-Gaming-Services CVE list CVE-2025-59281 critical Solution Install necessary updates from the KB section,...

PT-2025-42004

Name of the Vulnerable Software and Affected Versions Xbox affected versions not specified Description A use-after-free condition exists in Xbox, potentially allowing an authorized attacker to elevate privileges locally. This issue stems from improper memory management. An attacker with some leve...

Microsoft Xbox Gaming Services < 31.105.17001.0 Elevation of Privilege (October 2025)

The version of Microsoft Xbox Gaming Services on the remote Windows host is prior to 31.105.17001.0. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in XBox Gaming Services allows an authorized attacker to eleva...

Microsoft XBox 资源管理错误漏洞

Microsoft XBox is a gaming application from Microsoft, a U.S.-based company. A resource management error vulnerability exists in Microsoft XBox, which can be exploited by an attacker to elevate privileges...