Microsoft Patches Remote Code Execution Flaw in Age of Empires II

The security flaw, discovered in the remastered version of the 25-year-old strategy classic, allowed for remote code execution simply by joining a malicious lobby. Once a user accepted a custom game invite, the attacker could deploy harmful files directly onto the host system. Security firm Rapid7 confirmed that this exploit provided a pathway for full unauthorized control, potentially exposing gamers to password theft and malware installation.

While there is no evidence that hackers successfully leveraged this vulnerability in the wild, the incident highlights the risks inherent in gaming platforms. By targeting players, attackers can distribute malicious code to a wide, unsuspecting audience. The fix arrives amid a broader surge in vulnerability identification, as Microsoft increasingly utilizes artificial intelligence to identify and neutralize threats within its diverse product portfolio.