Use After Free Vulnerability in Windows DirectX by Microsoft
CVE-2025-60716

7HIGH

What is CVE-2025-60716?

A vulnerability in Windows DirectX has been identified that allows an authorized attacker to exploit a use after free condition, potentially leading to local privilege escalation. By manipulating memory allocation, an attacker could gain elevated privileges, resulting in unauthorized access to system resources. This highlights the importance of regular updates and security practices to mitigate such vulnerabilities.

Affected Version(s)

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.8027

Windows 10 Version 21H2 32-bit Systems 10.0.19044.0 < 10.0.19044.6575

Windows 10 Version 22H2 x64-based Systems 10.0.19045.0 < 10.0.19045.6575

References

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-60716 : Use After Free Vulnerability in Windows DirectX by Microsoft