In a move that should have excited fans, Microsoft added Call of Duty: WWII to PC Game Pass recently. But within days, it was pulled. The reason? A full-blown hacker infestation that didn’t just ruin matches — it endangered people’s systems.

With Microsoft’s acquisition of Activision Blizzard finally complete, fans have been buzzing with anticipation over what could come next for Call of Duty on Game Pass. The idea of booting up Modern Warfare 2, Black Ops II, or World at War with a Game Pass subscription sounds like a dream come true for longtime players — especially those who miss the golden era of split-screen trick shots and chaotic zombies lobbies.

There’s no doubt that Game Pass is becoming Microsoft’s flagship platform. Adding legacy Call of Duty titles makes perfect business sense. It re-engages lapsed players, boosts subscription value, and capitalizes on the franchise’s massive nostalgia factor. In fact, some of these older titles have already seen revived popularity in recent months, thanks to community-driven hype and modded servers.

But that dream is now running into reality — and it’s not pretty. Call of Duty: WWII was supposed to be a low-risk first step toward bringing back older entries. Instead, it’s become a warning sign of what happens when you bring old games with unpatched vulnerabilities into a modern platform with millions of users.

The situation with Call of Duty: WWII wasn’t just annoying—it was dangerous. The game became a hotbed for remote code execution (RCE) attacks, a type of exploit where malicious users can run code on another player’s machine simply by being in the same game session. In plain terms: someone halfway across the country could access your PC and manipulate it, just because you played a match with them.

And this isn’t limited to WWII. These vulnerabilities are deeply embedded in the IW engine — a codebase that has been the backbone of Call of Duty for nearly two decades. From Modern Warfare to Black Ops, from World at War to Advanced Warfare, many older titles run on versions of the same foundation. As one user put it bluntly:

“No it’s not [just WWII]. There is a way for people to access your PC just by connecting to you in a game. It affects every old COD because it uses the same engine. Including Quake.”

This isn’t just a cheat code arms race. It’s an infrastructure problem. Old games, especially those that haven’t received active support or security updates in years, become breeding grounds for exploits. These vulnerabilities weren’t designed for today’s online ecosystem — and malicious actors know it.

The text boxes, forced pop-ups, and PC manipulations players have documented aren’t theoretical threats. They’re real-time demonstrations of what happens when a popular platform like Game Pass intersects with forgotten game code and modern hacker communities.

The idea of revisiting classic Call of Duty titles on Game Pass sounds like a win. But nostalgia shouldn’t override basic digital safety. If Microsoft is serious about rolling out older Call of Duty games to millions of Game Pass subscribers, especially on PC, it must also be serious about securing them.

These aren’t harmless bugs. These are vulnerabilities that allow strangers to access players’ machines — not in theory, but in practice. Pulling WWII from the PC catalog was the right move. Now the real question is: will Microsoft fix the problem before they bring more of these games back?

The excitement around bringing legacy titles to Game Pass is real. But that excitement can’t blind us to the risks. Pushing these games live again without major investment in security patches or backend protections doesn’t just set up bad multiplayer experiences — it opens the door to real, widespread damage.

What Should Parents Know and Do?

Game Pass is a subscription service from Microsoft that gives users access to a large library of video games. Recently, there’s been talk of adding older Call of Duty titles to the platform. While these games haven’t been added yet, it’s important for parents to be aware of a potential risk tied to these older titles—especially on PC.

Many of these older games have serious security vulnerabilities that hackers can exploit. In some cases, just joining an online match could allow a bad actor to access another player’s computer. While this might sound extreme, gamers and cybersecurity experts have been sounding the alarm for years. And because these games are often sold cheaply at resale stores like GameStop or found for a few dollars online, they’re easy for kids to pick up without knowing the risks.

Here’s what parents should keep in mind:

• Be cautious of older Call of Duty titles on PC, whether bought through Game Pass or secondhand. If vulnerabilities remain unpatched, they could expose your child’s device.
  
• Ask your child what they’re playing and where they got it. If they mention downloading or buying older games, especially for PC, take a closer look.
  
• Talk to your child about online safety in games, including avoiding sketchy servers and not sharing personal info in chats.
  
• Use basic cybersecurity tools like firewalls and antivirus software to add protection in case something slips through.
  
• Avoid giving kids admin access on their gaming computers, which can limit the damage if something does go wrong.
  

While these risks might not be well known, they’re real—and worth paying attention to. Staying aware can help you keep gaming safe and fun for your child.

Until there’s transparency and a clear security roadmap, older Call of Duty titles should remain offline — or at least off Game Pass. Gamers deserve better than to risk their systems for a shot of nostalgia.