7 min read
7 min read

In a rare and serious move, Activision suspended online multiplayer services for the Microsoft Store and Game Pass PC versions, after multiple players reported hacks.
The company initially cited “an issue” but did not clarify why. Behind the scenes, insiders confirmed it was a security breach, as hackers exploited a critical flaw that allowed them to take control of players’ computers. The game remains offline at the time of writing.

According to cybersecurity discussions and affected players, hackers used a remote code execution (RCE) exploit to target Call of Duty WWII players.
An RCE flaw lets hackers remotely run malicious code, enabling them to install malware, steal data, or take over a device completely.
One player even posted footage showing their desktop hijacked mid-game. For now, Activision has labeled the game’s Microsoft Store and Game Pass versions unsafe for PC players.

Interestingly, not all versions of Call of Duty: WWII are affected. Activision’s shutdown applies only to the Microsoft Store and Game Pass versions that were launched recently in June.
Unlike the Steam release, these editions were built from an outdated codebase that still contained a previously patched RCE vulnerability.

When Activision first took Call of Duty WWII offline, it cited vague “reports of an issue” without addressing the underlying hack. This silence frustrated fans who suspected something more serious.
Only later did insider leaks confirm that the takedown was due to multiple players compromising their PCs via the game’s vulnerability. The lack of transparency has drawn criticism from parts of the gaming community.

Before official details emerged, players on forums like Reddit raised alarm bells about the issue. Posts warned that “the game is not safe to play” due to an RCE exploit, and recommended avoiding the Microsoft Store version entirely.
The grassroots warnings reflected the seriousness of the hack, as players shared stories of computers freezing, unknown code running, and desktop takeovers during gameplay sessions.

Sources of the situation confirmed that the Microsoft Store/Game Pass version of Call of Duty WWII used older game code with a long-patched vulnerability. Unfortunately, this legacy flaw went unnoticed in these specific releases.
Hackers seized on the opportunity, targeting players via the outdated code. The Steam version has already addressed this issue and remains unaffected online.

The irony of the situation is that Call of Duty WWII had only just been added to the Microsoft Store and Game Pass platforms in June 2025. What should have been a promotional opportunity turned into a cybersecurity disaster.
Hackers quickly identified the unpatched version, launching attacks that forced Activision to take the game offline entirely on those platforms.
Activision’s cybersecurity and development teams are reportedly working to patch the outdated flaw and secure the Microsoft Store and Game Pass versions of Call of Duty: WWII.
Until a fix is in place, those versions will remain offline. Fans hoping to return to the game must now wait until Activision certifies it as safe for play, though no official restoration timeline has been provided.

This incident is just the latest in a troubling trend. Over recent years, Call of Duty titles have been repeatedly targeted by hackers. From infostealer malware campaigns to hackers exploiting anti-cheat systems, Activision’s flagship franchise has faced ongoing cybersecurity battles.
In 2023, a worm-like malware spread through Call of Duty: Modern Warfare, exploiting another unpatched vulnerability.

The RCE exploit in this case is especially dangerous. With remote code execution vulnerabilities, hackers can crash the game and take complete control of a victim’s PC.
This includes accessing personal files, installing malware, and even spying on users. The severity of this exploit justified Activision’s drastic action of pulling the game offline entirely.

In a disturbing twist, some players recorded visible signs of the hack. In one viral clip, a player’s game froze, command line windows popped up unexpectedly, their wallpaper changed, and text appeared warning that they had been “RCE’d.”
This shocking visibility of the attack highlighted the exploit’s real-world severity and spread awareness of the threat across social media.

As of now, Activision has not issued detailed public statements about the hack. Requests for comment from journalists remain unanswered. Players only learned the real cause from insiders speaking anonymously to TechCrunch.
This silence has raised concerns about how the company handles major cybersecurity incidents, especially those affecting customers’ computers.

Activision has gone through multiple layoffs in recent years, some of which reportedly impacted its cybersecurity and anti-cheat teams directly. While other gaming companies are expanding their security staff, Activision’s cuts may have left it more vulnerable.
This latest incident has led some to question whether reduced internal resources contributed to the unpatched flaw slipping through.
Part of the confusion stems from the Microsoft Store and Game Pass versions of Call of Duty WWII are technically different builds from the Steam release.
This distinction led to the old vulnerability persisting in the new platform releases while remaining fixed in Steam. Hackers exploited this discrepancy, forcing Activision to treat each platform separately in its response.

Cybersecurity experts recommend that players avoid running any vulnerable versions of Call of Duty WWII on PC until Activision certifies them as safe.
Those who played the Microsoft Store or Game Pass editions should monitor their devices for signs of infection. Players should generally ensure all their games are updated and downloaded from official, patched sources.
Curious how other big names are pushing back on tech giants? Catch up on Epic and Spotify’s latest fight with Apple.

Ultimately, Activision’s handling of this incident could influence industry-wide approaches to gaming cybersecurity. As games become more connected and complex, publishers must prioritize vulnerability management, consistent patching, and transparent player communication.
This Call of Duty breach is a wake-up call that game security is now a frontline issue, not just a background concern.
Want some safer gaming news? See which free games had dropped on Prime Day.
What do you think about a cyberattack on such a big computer game? Will the hackers attack again? Please share your thoughts and drop a comment.
Read More From This Brand:
Don’t forget to follow us for more exclusive content on MSN.
This slideshow was made with AI assistance and human editing.
This content is exclusive for our subscribers.
Get instant FREE access to ALL of our articles.
Dan Mitchell has been in the computer industry for more than 25 years, getting started with computers at age 7 on an Apple II.
We appreciate you taking the time to share your feedback about this page with us.
Whether it's praise for something good, or ideas to improve something that
isn't quite right, we're excited to hear from you.
Stay up to date on all the latest tech, computing and smarter living. 100% FREE
Unsubscribe at any time. We hate spam too, don't worry.

Lucky you! This thread is empty,
which means you've got dibs on the first comment.
Go for it!