CVE-2025-62573CWE-362CWE-416

DirectX Graphics Kernel Elevation of Privilege Vulnerability

High · published December 9, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
15.0
In the wild
Unconfirmed
What it is

⚡ A local privilege escalation is lurking, and all it takes is a crafty exploit in Windows DirectX! 🔥 Think of this like a VIP lounge in a hotel with a hidden door. An authorized guest could slip through this unnoticed entry, gaining access to areas meant for high-level staff only. An attacker could cleverly utilize this vulnerability to elevate their privileges on the system, essentially gaining full control like a manager in charge. This could lead to devastating consequences such as installing malware, accessing sensitive data, or even manipulating system processes without detection.

Put simply

Think of this like a VIP lounge in a hotel with a hidden door. An authorized guest could slip through this unnoticed entry, gaining access to areas meant for high-level staff only. This use-after-free vulnerability in Windows DirectX allows authorized users to manipulate memory references, leading to potential privilege escalation. By exploiting this flaw, attackers can execute code with higher privileges than intended.

What to do

An attacker could cleverly utilize this vulnerability to elevate their privileges on the system, essentially gaining full control like a manager in charge. This could lead to devastating consequences such as installing malware, accessing sensitive data, or even manipulating system processes without detection. To safeguard against this threat, ensure you apply the latest updates and patches from Microsoft for Windows. Regularly review user permissions and restrict access where possible to minimize the risk of exploitation. You've got this! Stay proactive, and you'll keep your systems secure! 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00246 · 15.0th percentile
Weaknesses
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'); CWE-416 · Use After Free
Published
2025-12-09T17:55Z
EPSS history
Timeline
  • 09 DEC 17:55Z
    DirectX Graphics Kernel Elevation of Privilege Vulnerability
    cvelistv5