CyberSecBulletin

Epic Games vulnerabilities

We track 3 vulnerabilities in Epic Games products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.

3vulnerabilities
0critical
3high
0exploited
8.1average CVSS score

Latest Epic Games vulnerabilities

  • 7.7 High severity

    Unreal Engine: Initialization of a Resource with an Insecure Default

    CVE-2026-14765Epic Games

    Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node (UKismetSystemLibrary::LaunchURL). The URL scheme filter (FURLRequestFilter) is empty by default, which permits all URL sch

  • 8.8 High severity

    Epic Games Store: Improper Access Control

    CVE-2025-61973Epic Games

    A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges.

  • 7.8 High severity

    Epic Games Launcher: Incorrect Default Permissions

    CVE-2024-11872Epic Games

    Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute