Activision Patches 17-Year-Old RCE Vulnerabilities in Modern Warfare 2

Facebook

Activision Patches 17-Year-Old RCE Vulnerabilities in Modern Warfare 2

First seen 5 Sep 2026, 19:18 UTC • •27.9

Article Content

1 / 4

Browse articles

ThreatCluster •September 6, 2026 at 18:35 UTC

•Activision patched RCE vulnerabilities in Modern Warfare 2 after 17 years.
•The patch prevents malware execution during multiplayer sessions on PC.
•Backward-compatible versions on consoles still face the same security issues.

Activision has released a long-awaited patch for Remote Code Execution (RCE) vulnerabilities in Call of Duty: Modern Warfare 2 on PC, addressing issues that allowed attackers to run malware during multiplayer sessions. The vulnerabilities had been a significant threat for 17 years, affecting players by enabling malicious actors to take control of PCs. The update, confirmed by Activision, aims to secure the game and improve support for legacy titles. While the patch addresses known exploits for PC players, backward-compatible versions on consoles remain vulnerable. Activision encourages players to report any remaining issues through its Bug Bounty Portal. The company is committed to ongoing support for legacy titles and plans to release additional updates soon.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 47d ago How this analysis works

Timeline

2026-09-05

Patch released for Modern Warfare 2

Activision addressed all known RCE vulnerabilities in the PC version of the game, enhancing security for players.

Date unknown

Exploits active for 17 years

RCE vulnerabilities allowed attackers to upload malware and take control of PCs during multiplayer sessions since the game's launch in 2009.

More articles in this cluster (3)

Threat Graph

7 entities, 9 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Malware
Zero-day Exploit

Organization (1)

Activision

Affected Platform (4)

PC
PS4
Xbox
Xbox One

Relationships

Malware targets PC
Malware targets PS4
Malware targets Xbox
Malware targets Xbox One
Zero-day Exploit targets PC
Zero-day Exploit targets PS4
Zero-day Exploit targets Xbox
Zero-day Exploit targets Xbox One
Malware related to Activision

Following this threat?

Track Activision in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…

Korean-speaking Hackers Target PHP Vulnerabilities in Global Campaign A cybersecurity report from Cyfirma reveals that attackers, possibly linked to North Korea's Lazarus group, are preparing to exploit critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). These vulnerabilities allow unauthenticated remote code execution, posing a significant threat to government…