CVE-2025-62463
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
A null pointer dereference vulnerability in Windows DirectX allows an authorized attacker to deny service locally.
Risk Assessment
An authorized user can cause a service crash, potentially leading to disruption of applications using DirectX. This can affect system availability.
Recommendation
Apply security patches from Microsoft if available. Restrict system access to trusted users only.
Other vulnerabilities in Windows DirectX
See all- CVE-2026-58629High
Use-After-Free vulnerability in Windows DirectX. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-50382High
Vulnerability in Windows DirectX due to untrusted pointer dereference. An authenticated attacker can execute code locally.
- CVE-2026-50375Medium
Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.
- CVE-2026-50353High
Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
- CVE-2026-49807Medium
Windows DirectX exposes sensitive information to unauthorized actors, allowing an unauthorized attacker to disclose information locally.
Original NVD description (English source)
Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS