Overview

• A critical remote code execution vulnerability in the Xbox PC build has been actively exploited to run arbitrary code on players’ machines.
• Activision pulled the Microsoft Store and Game Pass edition on July 5, while Steam and Battle.net versions continue to operate normally.
• Gamers report forced shutdowns, command-prompt and Notepad pop-ups, and unwanted wallpaper changes including explicit imagery.
• Activision’s only official statement says the affected build was “brought offline” to investigate an issue, with no return date or remediation details provided.
• Security analysts link the flaw to the game’s legacy peer-to-peer networking and note that the patched vulnerability in other editions was reintroduced in the Game Pass release.