CVE-2026-50382
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
Vulnerability in Windows DirectX due to untrusted pointer dereference. An authenticated attacker can execute code locally.
Risk Assessment
Risk of local code execution, potentially leading to system takeover or privilege escalation.
Recommendation
Install the latest Windows security updates. Restrict local access to trusted users only.
Other vulnerabilities in Windows DirectX
See all- CVE-2026-58629High
Use-After-Free vulnerability in Windows DirectX. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-50375Medium
Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.
- CVE-2026-50353High
Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
- CVE-2026-49807Medium
Windows DirectX exposes sensitive information to unauthorized actors, allowing an unauthorized attacker to disclose information locally.
Original NVD description (English source)
Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally.