Yes, the Call of Duty: WWII RCE reports were serious and credible enough to trigger the removal of the Xbox PC/Microsoft Store version shortly after its PC Game Pass launch in July 2025. Players reported attackers opening Notepad, changing wallpapers, shutting down computers and otherwise interfering with Windows systems during multiplayer.
However, the evidence does not establish that every PC edition was equally vulnerable. The original reporting specifically identified the Xbox PC/Microsoft Store/Game Pass release. Steam remained available, but its current security status is not clearly documented by an official Activision bulletin. Treat the affected build as unsafe unless it is updated and officially cleared.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Call of Duty: WWII (PS4) | $23.50 | Buy on Amazon |
| 2 |
|
Call of Duty: WWII - Xbox One Standard Edition (Renewed) | $15.39 | Buy on Amazon |
| 3 |
|
Call of Duty: WWII - PlayStation 4 Standard Edition (Renewed) | $14.38 | Buy on Amazon |
| 4 |
|
Call Of Duty WWII PS4 | $25.99 | Buy on Amazon |
As an Amazon Associate I earn from qualifying purchases.
What the Call of Duty: WWII RCE reports mean
RCE means remote code execution: a vulnerability that can allow someone outside your computer to make a vulnerable program execute commands. In a multiplayer game, that is potentially much more serious than cheating or manipulating a match. The concern is that an attacker may interact with the Windows system running the game, not merely affect gameplay.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallIn July 2025, players reported apparent remote control of their PCs while playing Call of Duty: WWII. Reported behavior included Notepad and other programs opening, unwanted messages or images appearing, desktop wallpaper changes, shutdowns and other forms of interference. PC Gamer and Windows Central reported that the Xbox PC version was taken offline or removed while the issue was investigated.
#1 Best Overall
- The Best Shooter Experience on Console in 2017 - Daily Star
- An Explosive Return to its Roots - The Telegraph
- Call of Duty returns to its roots with Call of Duty: WWII a breath-taking experience that redefines World War II for a gaming generation
- Experience three different game modes: Campaign, multiplayer and co-operative
- Experience Call of Duty combat, the bonds of camaraderie and the unforgiving nature of war against a global power throwing the world into tyranny
Those reports should be taken seriously, but an individual screenshot, video or anecdote is not the same as a forensic confirmation. The available evidence does not prove that every affected player had malware installed, that attackers obtained persistent access, or that credentials were stolen in every incident.
Which versions were affected?
| Edition or platform | What can responsibly be said |
|---|---|
| Xbox PC app, Microsoft Store and PC Game Pass | This was the principal release identified in the July 2025 reporting. It was taken offline or removed while the issue was investigated. |
| Steam | Steam remained available and was not the version identified in the principal reports. That does not amount to an official guarantee that every Steam installation is safe. |
| PlayStation and Xbox consoles | The reported compromise concerned Windows PC. The available sources do not establish that consoles were exposed through the same attack path. |
| Battle.net | Availability and security status should not be assumed. Check the current official store listing before making a platform-specific judgment. |
The key distinction is distribution channel. “Call of Duty: WWII on PC” is too broad a description for the evidence currently available. A Game Pass installation may use a different executable, packaging arrangement or service path from a Steam installation.
Timeline of the incident
- Early July 2025: Call of Duty: WWII arrived on PC Game Pass.
- Shortly afterward: Players reported apparent remote actions during multiplayer, including pop-ups, wallpaper changes and shutdowns.
- July 2025: Coverage identified the Xbox PC/Microsoft Store release as the affected build, and that version was taken offline or withdrawn.
- March 1, 2026: A Steam community post claimed that a Steam security update had been released. This remains an attributed community claim, not a clearly confirmed Activision announcement.
- Available official status: The Call of Duty patch-notes index does not provide a clearly identifiable, dedicated WWII RCE bulletin or a platform-by-platform statement confirming that all PC editions are safe.
Is the Steam version safe?
There is no defensible basis for an unqualified “yes.” Steam was not the PC release singled out in the original July 2025 reports, and community discussions have claimed that it used different infrastructure. Another community discussion attributes a security update to March 1, 2026, but the claim was not independently confirmed by an official Activision patch note in the available material.
Rank #2
- Call of Duty returns to its roots with Call of Duty: WWII—a breathtaking experience that redefines World War II for a new gaming generation
- Land in Normandy on D-Day and battle across Europe through iconic locations in history’s most monumental war
- Experience classic Call of Duty combat, the bonds of camaraderie, and the unforgiving nature of war against a global power throwing the world into tyranny
The practical position is narrower:
- Update the game through Steam before launching it.
- Do not download a DLL replacement, cracked executable or unofficial “security patch.”
- Avoid public multiplayer if the client is unpatched or the platform’s current status is unclear.
- Check the official Activision patch-notes page and Steam’s own update information rather than relying on an old forum post.
Steam’s continued availability does not prove that it shared the same vulnerability, but it also does not prove that every historical or current build is secure.
Does the exploit affect single-player?
The available reports concern online multiplayer interactions, where a player is exposed to networked opponents. Offline campaign play has a materially different risk profile because it does not expose the game to the same online session participants.
For the lowest-risk setup, update the game first and play the campaign with online services disabled or while disconnected where practical. Do not assume offline play makes a compromised Windows installation safe. Mods, unofficial launchers, suspicious downloads and other third-party files can create separate risks.
Rank #3
- Call of Duty returns to its roots with Call of Duty: WWII—a breathtaking experience that redefines World War II for a new gaming generation
- Land in Normandy on D-Day and battle across Europe through iconic locations in history’s most monumental war
- Experience classic Call of Duty combat, the bonds of camaraderie, and the unforgiving nature of war against a global power throwing the world into tyranny
What to do before launching the game
- Identify the build. Confirm whether the installation came from Xbox PC/Microsoft Store/PC Game Pass, Steam or another channel.
- Install all updates. Update Windows, the relevant launcher and the game itself.
- Check official status. Look for a statement from Activision or the platform holder identifying the build as restored and patched.
- Remove unofficial modifications. Do not use community DLLs, executables or “fixes” unless their provenance can be independently verified.
- Reduce exposure. If the build’s security status is uncertain, avoid public online multiplayer. Use offline modes only after updating and, where practical, disconnecting from online services.
These steps reduce risk; they are not a substitute for an official security advisory. The available sources do not provide a current, WWII-specific remediation checklist from Activision or Microsoft.
Recommended Free Tools
If you saw suspicious activity while playing
- Disconnect the PC from the internet. Stop the game and disable Wi-Fi or unplug the network cable.
- Preserve evidence. Keep screenshots, recordings, timestamps, usernames, crash details and relevant Windows or launcher logs.
- Run security scans. Use a full scan with your installed security software and Windows Security. A quick scan alone should not be treated as proof that the system is clean.
- Secure accounts from another device. Change important passwords, beginning with email, Activision, Microsoft, Steam, banking and password-manager accounts.
- Revoke sessions. Sign out other sessions and review account alerts, recovery details and multi-factor authentication settings.
- Check for persistence. Review startup applications, scheduled tasks, browser extensions, newly installed programs and unusual outbound connections.
- Escalate if necessary. If malware or ongoing access is suspected, seek professional incident-response help or reinstall Windows. Do not assume a visible prank was harmless.
Prioritize accounts containing sensitive information, including work or school systems, cloud storage, cryptocurrency wallets, saved browser passwords and authentication tokens.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What the reports do—and do not—prove
They support
- A serious security issue was reported by multiple players.
- The Xbox PC/Microsoft Store/Game Pass release was specifically implicated.
- The affected PC release was taken offline or removed during investigation.
- Some players reported actions that went beyond ordinary in-game cheating.
They do not establish
- That every Steam or other PC installation had the same vulnerability.
- That every report represented a confirmed full system takeover.
- That malware or credential theft occurred in every case.
- That a crash, disconnect or unusual match by itself proves an RCE attack.
- That every older Call of Duty game shares this exact issue.
A changed wallpaper or opened application demonstrates apparent interference, but it does not by itself show that personal files were read or copied. Conversely, the absence of visible symptoms does not prove that a compromised system is clean.
Rank #4
- The best shooter experience on console in 2017 - Daily Star
- an explosive return to its roots - The Telegraph
- experience three different game modes: Campaign, Multiplayer and co-operative
Common mistakes to avoid
- Do not say the game was pulled from every PC store. The reporting points specifically to the Xbox PC/Microsoft Store/Game Pass release; Steam remained available.
- Do not call Steam definitively safe. The original reports did not identify Steam, but current platform-wide safety is not clearly confirmed in the available official material.
- Do not equate RCE with confirmed data theft. RCE describes capability, not the exact actions performed in every incident.
- Do not assume a quick antivirus scan settles the matter. Investigate persistence and secure accounts if suspicious behavior occurred.
- Do not install an unofficial fix. A malicious “patch” can create a new compromise or damage the wrong build.
Bottom line
The Call of Duty: WWII RCE story was not merely an ordinary cheating rumor: the reports were serious enough for the Xbox PC/Microsoft Store version to be taken offline in July 2025. But the evidence does not justify saying that every PC edition was hacked or that Steam is unquestionably safe.
If you own the Game Pass or Microsoft Store build, do not enter online multiplayer on an old or unverified installation. If you use Steam, update it and treat the lack of a clear official, platform-by-platform security statement as a reason for caution—not as proof of compromise. Anyone who experienced programs opening, shutdowns or other unexplained Windows activity should disconnect, scan, secure accounts from a trusted device and consider professional help or a Windows reinstall if persistence is suspected.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
