CVE-2026-66801 Microsoft Xbox Remote Code Execution Vulnerability
CriticalCVSS 9.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in Xbox allows an unauthorized attacker to execute code over a network.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsoft gdk | < 2610 | 2610 |
| redhat/multicluster-globalhub/multicluster-globalhub-rhel9-operator:1786621416(Red Hat:multicluster_globalhub:1.4::el9) | All versions | No fix listed |
| redhat/multicluster-globalhub/multicluster-globalhub-rhel9-operator:1786621343(Red Hat:multicluster_globalhub:1.5::el9) | All versions | No fix listed |
| redhat/multicluster-globalhub/multicluster-globalhub-rhel9-operator:1786071343(Red Hat:multicluster_globalhub:1.6::el9) | All versions | No fix listed |
| redhat/multicluster-globalhub/multicluster-globalhub-rhel9-operator:1785773214(Red Hat:multicluster_globalhub:1.7::el9) | All versions | No fix listed |
| redhat/multicluster-globalhub/multicluster-globalhub-rhel9-operator:1786067967(Red Hat:multicluster_globalhub:1.8::el9) | All versions | No fix listed |
| microsoft gdk | >= 1.0.0.0, < 2610 | 2610 |
References
- MSRC Security Update Guide patch vendor-advisory
- Red Hat CVE page mitigation vendor-advisory
- RHSA-2026:55810 patch vendor-advisory
- RHSA-2026:54577 patch vendor-advisory
- RHSA-2026:54392 patch vendor-advisory
- RHSA-2026:53530 patch vendor-advisory
- RHSA-2026:52946 patch vendor-advisory
- Red Hat Bugzilla 2508045 issue-tracking
- www.cve.org
- nvd.nist.gov