Improper Authorization in Xbox Gaming Services - CVE-2026-58611
Published: September 9, 2026
Vulnerability identifier: #VU148221
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-58611
CWE-ID: CWE-285
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to improper authorization in XBox Gaming Services, which leads to security restrictions bypass and privilege escalation.
Affected software
Xbox Gaming Services
How to mitigate CVE-2026-58611
Install updates from vendor's website.
Xbox Gaming Services - update to 37.114.10001.0