Home Microsoft CVE-2025-61973
Back to Microsoft

CVE-2025-61973

Microsoft Store - Epic Games Store

Microsoft CVSS 8.8 Updated March 14, 2026

Executive Risk Summary

"A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store, allowing a low-privilege user to replace a DLL file and potentially elevate privileges. This vulnerability poses a risk to system security and integrity, as an attacker could exploit it to gain unauthorized access to sensitive data and systems."

Operational Audit Arsenal

Target Type DLL
Target Asset Unspecified DLL file
Standard Path %windir%\System32
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: Unspecified DLL file (DLL)
$Targets = 'Unspecified DLL file'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Likely

Gaming services and Microsoft Store functionality may be affected

Internal Work Notes

Local privilege escalation vulnerability in Microsoft Store - Epic Games Store installation, requiring patching and verification to prevent unauthorized access and privilege elevation.

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Microsoft Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.