Activision says they have taken the PC version of Call of Duty: WWII offline following the discovery of a critical security vulnerability that allowed hackers to remotely access and control players’ computers during online matches.
Details of the Security Breach
The vulnerability, classified as a Remote Code Execution (RCE) exploit, enabled malicious actors to run unauthorized code on the computers of unsuspecting players simply by joining the same multiplayer session. Reports from the gaming community and cybersecurity experts indicate that affected users experienced unauthorized actions on their systems, such as applications being opened, desktop settings altered, and unsolicited messages appearing on their screens.
The issue came to light soon after Call of Duty: WWII was added to Microsoft’s Game Pass service, prompting a surge in new players and increased scrutiny of the game’s security.
Activision’s Response
In response to the incident, Activision disabled online access to the PC version of Call of Duty: WWII via the Microsoft Store on July 5, 2025. The company cited “reports of an issue” and stated that the game would remain offline while an investigation is underway. At this time, Activision has not provided a timeline for when online services will be restored or released technical details about the vulnerability.
Recommendations for Players
- Avoid playing Call of Duty: WWII on PC until official confirmation of a fix.
- Run a comprehensive antivirus scan if you suspect your system may have been compromised.
- Change passwords for sensitive accounts as a precaution.
- Monitor official channels for updates on server status and security patches.