Multiple Xbox Games Temporarily Delisted Due To Security Issue With The Unity Engine

A number of Xbox first-party titles have unexpectedly become inaccessible on the Microsoft Store during the last few hours due to a security concern that has been identified regarding the Unity engine.

The “security flaw” dates back to 2017, and Unity has offered solutions that developers can apply; however, Microsoft has eliminated several games, bundles, and add-ons from the Xbox storefront until those solutions are implemented for each game.

Luckily, this security concern does not impact the Xbox console or Xbox Cloud Gaming versions of these titles, yet some have still been removed from the Microsoft Store on both console and PC.

“A security flaw was discovered that impacts games and applications developed on Unity versions 2017.1 and later for Android, Windows, Linux, and macOS operating systems. There is no proof of any exploitation of the flaw, nor has there been any effect on users or customers. We have proactively supplied solutions that address the flaw, and they are already accessible to all developers. The flaw was responsibly reported by security researcher RyotaK, and we appreciate his collaboration with us.”

Here’s the compilation of affected first-party Xbox games as mentioned on the Microsoft website:

• Avowed Artbook
• DOOM: Dark Ages Companion App
• Fallout Shelter
• Ghostwire Tokyo Prelude
• Grounded 2 Artbook
• Hearthstone
• Knights and Bikes
• Pillars of Eternity II: Deadfire
• Starfield Companion App
• The Bard’s Tale Trilogy
• The Elder Scrolls IV: Oblivion Remastered Companion App
• The Elder Scrolls: Blades
• The Elder Scrolls: Castles
• Warcraft Rumble
• Wasteland 3
• Wasteland Remastered

Obsidian has also provided a somewhat different list on social media:

“Our team is diligently working on a resolution and will reinstate these games as soon as feasible. We will share more information once they are available again. We also advise players who have already downloaded these games to update them as soon as a patch is released.”

• Grounded 2 Founders Edition
• Grounded 2 Founders Pack
• Avowed Premium Edition
• Avowed Premium Edition Upgrade
• Pillars of Eternity: Hero Edition
• Pillars of Eternity: Definitive Edition
• Pillars of Eternity II: Deadfire
• Pillars of Eternity II: Deadfire Ultimate
• Pentiment

In contrast, several games that are no longer supported have been permanently removed instead.

Applications and games that are not currently supported by Microsoft will be taken off app stores to protect customers. If you are still utilizing one of the following applications or games, we recommend you uninstall:

• DOOM (2019)
• DOOM II (2019)
• Forza Customs
• Gears POP!
• Halo Recruit
• Mighty Doom
• The Elder Scrolls: Legends
• Zoo Tycoon Friends

Once more, it should be emphasized that the security flaw is not reported to influence console versions, but due to how the Microsoft Store operates, the removal for titles like Pentiment and Wasteland 3 is still applicable in the console version of the store.

A complete FAQ regarding this matter is available on the Microsoft website if you are interested in further details, and we will summarize some critical sections from it below:

Q: I am playing one of the affected games on Xbox console, should I be concerned?
A: No. Console games and cloud gaming are unaffected.

Q: How can I identify if my game is affected?
A: You can check the above list for the impacted Microsoft titles. If the game you are currently playing is not listed and you have installed all available security updates, no additional action is necessary. The provided list is solely representative of first-party Microsoft games.

Q: I am using an affected game or app, what actions should I take?
A: You should uninstall the impacted application until an update is accessible. Updates are being released regularly; you can monitor this page to see if the impacted application has been removed from the “Updates in Progress” list above or check for available updates on your device. We also recommend customers subscribe to Security Update Guide notifications to receive alerts about updates for impacted games/apps. This Advisory and the related CVE will be updated with new information as necessary and will link to any future security updates released.

Q: When will updates be ready for the games and apps that have not been updated?
A: Microsoft does not provide ETAs for security updates. Solutions to security concerns are evaluated to ensure quality prior to being released and will be published to the Microsoft Store once testing has been completed.

Have you seen any games being removed from the Xbox Store because of this? Share your thoughts with us below.