CVE-2026-58611: Microsoft Xbox Gaming Services

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Xbox Gaming Services: before 37.114.10001.0 (fixed in 37.114.10001.0)

Published 2026-09-08. Last modified 2026-09-14.