CVE-2025-60723CWE-362CWE-416
DirectX Graphics Kernel Denial of Service Vulnerability
Medium · published November 11, 2025
What it is
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to deny service over a network.
The record
Technical detail
- CVSS v3.1
- 6.3 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
- CVSS v4.0
- Not supplied
- EPSS
- 0.00860 · 58.2th percentile
- Weaknesses
- CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'); CWE-416 · Use After Free
- Published
- 2025-11-11T17:59Z
EPSS history
Timeline