Exploit discussion active in current signal (5 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-15 | 2 | Disclosure1Patch1 |
| 2026-07-16 | 5 | Disclosure3Patch2 |
Here’s the Age of Empires RCE from yesterday’s Patch Tuesday: CVE-2026-50663. Join an attacker’s lobby, (auto-)accept UCG, and you get remote code execution. https://t.co/QmMkY07C8S
Post summary
A new Age of Empires RCE (CVE‑2026‑50663) was disclosed, explaining that joining an attacker’s lobby and auto‑accepting UCG can trigger remote code execution; no exploit code, patch, or active exploitation reports are provided.
Microsoft fixed an Age of Empires RCE from yesterday’s Patch Tuesday (CVE-2026-50663). Here is an example of how it was done. https://t.co/dihxJsB70Z
Post summary
Microsoft released a security update for CVE‑2026‑50663 (an RCE in Age of Empires) and in the tweet shared a demonstration link showing how the flaw was exploited.
Une RCE dans Age of Empires II: Definitive Edition (CVE-2026-50663, CVSS 8.8). Rejoindre le salon multijoueur d'un attaquant et accepter l'UGC suffisait pour compromettre le PC. Patch dispo. Les détails 👇 https://www.it-connect.fr/age-of-empires-ii-faille-rce-cve-2026-50663/ #cybersecurite #gaming #ageofempire https://t.co/cl59Ywdsck
Post summary
A newly discovered RCE vulnerability (CVE-2026-50663) in Age of Empires II Definitive Edition allows attackers to compromise a PC by joining a multiplayer lobby and accepting UGC, with a patch now available.
Yes, please hold. “Security researcher @rdjgr details CVE-2026-50663, an Age of Empires RCE vulnerability from Patch Tuesday that lets attackers achieve remote code execution when victims join a malicious lobby and accept UGC. • The core issue is a path traversal bug reachable through custom scenarios or lobby file transfers, allowing file overwrites such as the bug reporter EXE or game DLLs with limited user interaction. • Exploitation uses real-time traffic interception via a custom proxy inspired by Burp Suite, built through reverse engineering; the fix shipped in April 2026 but received its CVE assignment later.”
Post summary
The post announces CVE‑2026‑50663, a path traversal RCE flaw in Age of Empires that was patched in April 2026, and describes the exploitation method using a custom proxy.
Tu penses seulement jouer tranquille et tu te retrouves avec quelq'un qui pilote ton pc... Si jamais vous jouez à âge of empires 2 pensez a mettre votre jeu a jour https://www.it-connect.fr/age-of-empires-ii-faille-rce-cve-2026-50663/
Post summary
A warning about an RCE vulnerability (CVE-2026-50663) in Age of Empires II is issued, urging players to update the game to remediate the issue.
[IT-Connect] - Age of Empires II : une faille permettait de prendre le contrôle d’un PC via une partie multijoueur - https://www.it-connect.fr/age-of-empires-ii-faille-rce-cve-2026-50663/ 👌😁
Post summary
The article reports the disclosure of CVE-2026-50663, a remote code execution flaw in Age of Empires II that can allow attackers to take control of a PC via multiplayer gameplay.
Microsoft patches Age of Empires II bug that enabled RCE via game invite What this means Here's the thing: even a 25-year-old strategy classic can still open a hole in your PC. In Tuesday's Patch Tuesday, Microsoft fixed CVE-2026-50663 in the remastered Age of Empires II. Security researchers say a crafted malicious game invite could let attackers take over a victim's machine — join a lobby, auto-accept user-generated content, get remote code execution. Rapid7 notes success meant planting malicious files and running code. No evidence of in-the-wild exploitation yet, but gaming invites are a known malware delivery path for password theft and more. Hidden points - Part of a record-size Microsoft patch batch that the company partly credits to AI-assisted bug discovery - Researcher Rick de Jager posted a demo on X of the AoE RCE chain - Remastered multiplayer path is the risk surface — not just offline campaign nostalgia - Classic lesson: old software still shipping online features inherits modern threat models Real impact / takeaways Basically, if you still play AoE II online, update now and treat random lobby invites like sketchy email attachments. For security teams, game clients remain a soft underbelly on corporate machines. For Microsoft, it's another reminder that the gaming catalog is part of the enterprise patch surface, not a side hobby. Bottom line Microsoft patched an Age of Empires II remaster flaw that could RCE a PC through a malicious game invite — no known mass exploit yet, still worth updating. Source : TechCrunch https://techcrunch.com/2026/07/15/microsoft-patches-bug-in-video-game-age-of-empires-ii/ #Microsoft #Cybersecurity #AgeOfEmpires #PatchTuesday #Gaming
Post summary
Microsoft released a patch for CVE‑2026‑50663 in Age of Empires II that would allow remote code execution via malicious game invites; no evidence of active exploitation, but a PoC demo was publicly posted.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | age_of_empires_ii | - | - | - |