CVE-2025-68623

In Microsoft DirectX End-User Runtime Web Installer 9.29.1974.0, a low-privilege user can replace an executable file during the installation process, which may result in unintended elevation of privileges. During installation, the installer runs with HIGH integrity and downloads executables and...

CVE-2025-68623

CVE-2025-68623 affects Microsoft DirectX End-User Runtime Web Installer 9.29.1974.0. Cisco Talos TALOS-2025-2293 documents a local privilege escalation: during installation, the dxwebsetup.exe installer creates a writable TEMP path, writes dxwsetup.exe, then executes it with high integrity. An at...

Security information for Hitachi Disk Array Systems

Overview CVE-2023-31096 | MITRE: CVE-2023-31096 Windows Agere Soft Modem Driver Elevation of Privilege Vulnerability CVE-2024-55414 | Windows Motorola Soft Modem Driver Elevation of Privilege Vulnerability CVE-2026-20804 | Windows Hello Tampering Vulnerability CVE-2026-20805 | Desktop Window...

CVE-2026-20836 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2026-20836

CVE-2026-20836 is a Windows graphics kernel vulnerability where a race condition in a shared resource allows local privilege elevation. The issue stems from concurrent execution with improper synchronization in the Graphics Kernel. The impact is local privilege escalation (C:H/I:H/A:H per CVSS 3....

CVE-2026-20836 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2026-20814 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2026-20814 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...

KLA90840 Multiple vulnerabilities were found in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information, cause denial of service, spoof user interface. Below is a complete list of...

CVE-2025-62463

Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally...

CVE-2025-62573

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally...

CVE-2025-62465

Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally...

CVE-2025-62573

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally...

CVE-2025-62573

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally...

CVE-2025-62463

Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally...

CVE-2025-62465

Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally...

CVE-2025-62463

Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally...

CVE-2025-62465

Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally...