CVE-2017-8579

High

Published: 29/06/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The DirectX component in Microsoft Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016 allows an authenticated attacker to run arbitrary code in kernel mode via a specially crafted application.

Risk Assessment

An attacker with appropriate permissions could exploit this vulnerability to gain elevated privileges in the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update the system to the latest version to minimize the risk associated with this vulnerability.

Other vulnerabilities in DirectX

CVE-2020-1140High
An elevation of privilege vulnerability in DirectX due to improper handling of objects in memory. An attacker could run arbitrary code in kernel mode, then install programs, view, change or delete data, or create new accounts with full user rights.

Original NVD description (English source)

The DirectX component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to run arbitrary code in kernel mode via a specially crafted application, aka "DirectX Elevation of Privilege Vulnerability."