CVE-2025-60716CWE-416

DirectX Graphics Kernel Elevation of Privilege Vulnerability

High · published November 11, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
31.3
In the wild
Unconfirmed
What it is

⚡ A local attack can elevate privileges with a crafty use-after-free in Windows DirectX! Imagine what could happen if a user opens the door to an intruder without realizing it. 🔑 Think of a delivery service that, after dropping off packages, forgets to take back a few they accidentally left behind. That’s like the memory in this case: no longer in use, yet still accessible to someone who knows how to reach it! An attacker could exploit this vulnerability to gain administrative access, allowing them to execute arbitrary code and control the system at will. It’s like handing over the keys to your house to a stranger, who can then take anything they want, or worse!

Put simply

Think of a delivery service that, after dropping off packages, forgets to take back a few they accidentally left behind. That’s like the memory in this case: no longer in use, yet still accessible to someone who knows how to reach it! The use-after-free vulnerability in Windows DirectX occurs when the program continues to use a reference to a memory object that has already been freed, enabling an attacker to manipulate the memory and elevate their privileges locally.

What to do

An attacker could exploit this vulnerability to gain administrative access, allowing them to execute arbitrary code and control the system at will. It’s like handing over the keys to your house to a stranger, who can then take anything they want, or worse! Update your Windows DirectX to the latest version available, as Microsoft is likely to release a patch soon. Additionally, regularly audit your code and system configurations to ensure no unauthorized changes have been made. 🔒 You've got this! By staying proactive and applying these updates, you can keep your systems secure. 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00385 · 31.3th percentile
Weakness
CWE-416 · Use After Free
Published
2025-11-11T17:59Z
EPSS history
Timeline
  • 11 NOV 17:59Z
    DirectX Graphics Kernel Elevation of Privilege Vulnerability
    cvelistv5