CVE-2025-55698
HighCVSS 7.7Exploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
A null pointer dereference vulnerability exists in Windows DirectX. An authorized attacker can exploit it to cause a denial of service over a network.
Risk Assessment
An attacker with valid credentials can remotely trigger a crash of the service or system, causing an availability disruption. This may disrupt applications or workstations relying on DirectX.
Recommendation
Apply the Windows security updates provided by Microsoft that address this vulnerability. Monitor for unusual network access attempts to DirectX-related services.
Other vulnerabilities in Windows DirectX
See all- CVE-2026-58629High
Use-After-Free vulnerability in Windows DirectX. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-50382High
Vulnerability in Windows DirectX due to untrusted pointer dereference. An authenticated attacker can execute code locally.
- CVE-2026-50375Medium
Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.
- CVE-2026-50353High
Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
- CVE-2026-49807Medium
Windows DirectX exposes sensitive information to unauthorized actors, allowing an unauthorized attacker to disclose information locally.
- CVE-2025-62463Medium
A null pointer dereference vulnerability in Windows DirectX allows an authorized attacker to deny service locally.
Original NVD description (English source)
Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS