CVE-2026-49807
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
Windows DirectX exposes sensitive information to unauthorized actors, allowing an unauthorized attacker to disclose information locally.
Risk Assessment
An attacker can access sensitive data related to DirectX, potentially leading to privacy breaches or further attacks.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Windows DirectX
See all- CVE-2026-58629High
Use-After-Free vulnerability in Windows DirectX. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-50382High
Vulnerability in Windows DirectX due to untrusted pointer dereference. An authenticated attacker can execute code locally.
- CVE-2026-50375Medium
Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.
- CVE-2026-50353High
Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally.