Wizards of the Coast has 1 CVE on record. 1 was published in the last 90 days. The median CVSS is 3.4 (low).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 3.4
Publish → KEV: —
Last 90 days: 1 prev 0

Weakness classes

CWE-99 1

Products

Magic: The Gathering Arena 1

Follow Wizards of the Coast:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-107448Low· 3.4Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a server-supplied URL from a home-screen carousel GoToExternalUrl action directly to the Windows shell via Application…19

Wizards of the Coast vulnerabilities

CVEs affecting Wizards of the Coast, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-107448Low· 3.4

Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a server-supplied URL from a home-screen carousel GoToExternalUrl action directly to the Windows shell via Application…

Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a server-supplied URL from a home-screen carousel GoToExternalUrl action directly to the Windows shell via Application…

▾ SunlitWizards of the Coast · Magic: The Gathering Arenavia NVD

Wizards of the Coast vulnerabilities (CVEs) · VulnSea