Microsoft used AI-assisted bug hunting to patch a critical security flaw in the Age of Empires II remaster that could allow remote code execution via malicious game invites.

Microsoft has deployed an AI‑assisted patch to fix a critical security vulnerability in the Age of Empires II: Definitive Edition, a flaw that could have allowed remote code execution through malicious game invites.

The vulnerability

The bug stemmed from a buffer overflow in the game’s network handling code, which could be triggered when a player accepted a specially crafted invitation. Exploiting the flaw would let an attacker execute arbitrary code on the victim’s machine without user interaction.

AI‑driven discovery

Microsoft’s security team leveraged its internal AI‑assisted bug‑hunting platform to identify the flaw during routine code analysis. The system flagged the risky code path, enabling engineers to reproduce and remediate the issue faster than traditional manual review.

Patch rollout

The patch was released through the standard Windows Update channel and the game’s built‑in update mechanism on July 15, 2026. Users are advised to install the update promptly, as the vulnerability was classified as high severity.

  • Apply the latest Windows Update
  • Launch Age of Empires II and let it update automatically
  • Restart the game after installation

Microsoft recommends enabling automatic updates for both the operating system and the game to ensure continued protection against emerging threats.

“AI tools are becoming an integral part of our security workflow, helping us find and fix bugs that could otherwise go unnoticed,” said a Microsoft spokesperson.

The fix does not affect gameplay performance and has been tested across all supported platforms, including Windows PC and Xbox Series X|S.

For more details, see TechCrunch coverage of Microsoft’s Age of Empires II patch.