CVE-2025-61973CWE-284

A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store

High · published January 15, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

⚡ A sneaky user can swap a DLL during the Epic Games Store setup, paving a path for privilege elevation! 🚀 Think of it like a house guest sneaking into the kitchen and swapping the recipe card for their own secret formula while you're busy setting the table. When you follow that recipe, you end up with a dish that’s not what you intended! An attacker with low privileges can replace a crucial DLL file during installation, allowing them to run commands and access sensitive data as if they were an administrator. This could lead to unauthorized access to files, settings, and even full control over the system—absolutely devastating for users.

Put simply

Think of it like a house guest sneaking into the kitchen and swapping the recipe card for their own secret formula while you're busy setting the table. When you follow that recipe, you end up with a dish that’s not what you intended! This local privilege escalation vulnerability in the Epic Games Store installation via the Microsoft Store allows a low-privilege user to manipulate a DLL file during the setup process, which may result in unintended elevation of privileges, thus granting higher access levels than intended.

What to do

An attacker with low privileges can replace a crucial DLL file during installation, allowing them to run commands and access sensitive data as if they were an administrator. This could lead to unauthorized access to files, settings, and even full control over the system—absolutely devastating for users. To mitigate this risk, ensure you're running the latest version of the Epic Games Store and monitor installations closely. Implement stricter permissions during the install process to prevent unauthorized file modifications, and conduct regular security audits. This is fixable! Follow these steps to tighten your security and keep your system safe. 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00157 · 4.5th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-01-15T15:19Z
EPSS history
Timeline
  • 15 JAN 15:19Z
    A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store
    cvelistv5