Microsoft Xbox 360 vulnerabilities

2 CVEs affecting Microsoft Xbox 360, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-1221, published 2007-03-02.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-1221, published 2007-03-02. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 allows attackers with physical access to force execution of the hypervisor syscall with a certain register set, which bypasses intended code…
• CVE-2007-1220, published 2007-03-02. Medium severity, CVSS 6.2. EPSS: 1.4% chance of exploitation in the next 30 days. The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 does not properly verify the parameters passed to the syscall dispatcher, which allows attackers with physical access to bypass code-signing…