Microsoft patches critical Age II RCE

Microsoft released a secure Patch Tuesday update fixing a critical flaw in the remastered Age of Empires II that could let an attacker remotely take control of a player’s computer through a specially crafted game invitation. Rapid7 described the vulnerability as tied to how invitations are handled, where joining the attacker’s lobby could trigger remote code execution. While there is no evidence of active real-world exploitation, researchers warn that online gaming platforms remain attractive targets for malware and credential theft. The fixes are part of a historic, AI-assisted broad patch batch Microsoft deployed across its products, reflecting the company’s use of AI to identify and remediate numerous vulnerabilities. Several outlets note demonstrations and videos showing how the exploit could work, even as official word emphasizes no reported exploits to date. The incident underscores the importance of applying updates promptly, especially for gamers who frequently interact with invites and online lobbies.