Microsoft's advisory and community trackers point to an elevation‑of‑privilege flaw in the Xbox Gaming Services component that lets a local, low‑privilege user coerce higher‑privilege file operations via unsafe link resolution — a classic CWE‑59 (improper link resolution) pattern — and although...
Title: CVE confusion and the real risk — Xbox Gaming Services “link following” elevation-of-privilege explained
Lede
Short version for busy admins: the Xbox Gaming Services elevation‑of‑privilege flaw widely discussed in 2024/2025 is indexed publicly as CVE-2024-28916 (CWE‑59: Improper link...