CVE-2025-55242

MediumCVSS 6.5

Published: 04/09/2025(UTC)Updated: 30/09/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.78%

54th percentile - higher than 54% of all known CVEs

Summary

Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose information over a network.

Risk Assessment

An unauthorized attacker can access sensitive information, potentially leading to privacy or data security breaches. Organizations using Xbox are at risk of data leakage.

Recommendation

Apply available security updates for Xbox and monitor for unusual network activity.

Other vulnerabilities in Xbox

CVE-2026-78455Medium
An out-of-bounds read vulnerability in Xbox allows an unauthorized attacker to disclose information via a physical attack.

Original NVD description (English source)

Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose information over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS