PatchTheCVEbattle.net vulnerabilities and fixes
Recent CVEs affecting battle.net, with upgrade or downgrade steps. 1 tracked.
Also searched as: battle net, battlenet.
battle.net has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-05-21. Highest priority: CVE-2025-27997 (score 31/100).
- CVE-2025-27997 HIGH 8.4 DOWNGRADE An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted sh
FAQ
How do I fix battle.net vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is battle.net being exploited right now?
None of the tracked battle.net CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which battle.net CVE should I patch first?
CVE-2025-27997 currently ranks highest (31/100): An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted sh.