CVE-2025-59281

HighCVSS 7.8

Published: 14/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

31th percentile - higher than 31% of all known CVEs

Summary

Improper link resolution before file access ('link following') in XBox Gaming Services allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker with local access can exploit the vulnerability to elevate privileges on the system, potentially gaining control over the application or data. The risk mainly affects users of XBox Gaming Services on Windows.

Recommendation

Apply available security updates for XBox Gaming Services. Restrict local access to trusted users.

Other vulnerabilities in XBox Gaming Services

CVE-2026-58611High
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally.

Original NVD description (English source)

Improper link resolution before file access ('link following') in XBox Gaming Services allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS