2K Sid Meiers Civilization Vi — CVE-2026-116370 (Critical)

Date Oct 26, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product 2K · Sid Meiers Civilization Vi

CVE CVE-2026-116370

Critical vendor advisory CVE-2026-116370

Summary

A security flaw has been discovered in 2K Games Sid Meier's Civilization VI 1.0.12.68. The affected element is the function loadstring of the component Lua sandbox. Performing a manipulation results in type confusion. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 6.3) in 2K Sid Meiers Civilization Vi. Patch or mitigate promptly. EPSS percentile: 34%.

Operator check

Review CVE-2026-116370 in your asset inventory. Apply patches per vendor guidance and verify Sid Meiers Civilization Vi is not exposed. CVSS score: 6.3. EPSS probability: 0.4%; percentile: 34%.

Sources

NVD — CVE-2026-116370 Source reference Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed