MSRC-CVE-2025-24997 — DirectX Graphics Kernel File Denial of Service Vulnerability

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to compromise admin credentials on the device.

Security updates
10.0.20348.3328 — https://support.microsoft.com/help/5053603
10.0.20348.3270 — https://support.microsoft.com/help/5053638
10.0.19044.5608 — https://support.microsoft.com/help/5053606
10.0.22621.5039 — https://support.microsoft.com/help/5053602
10.0.26100.3476 — https://support.microsoft.com/help/5053598
10.0.26100.3403 — https://support.microsoft.com/help/5053636
10.0.25398.1486 — https://support.microsoft.com/help/5053599

Vulnerabilities 1

Medium 4.4

CVE-2025-24997

DirectX Graphics Kernel File Denial of Service Vulnerability

Null pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service locally.

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Mar 11, 2025

Revision history

2025-03-13 #2
Added an acknowledgement. This is an informational change only.
2025-03-11 #1
Information published.

References

CVE-2025-24997 DirectX Graphics Kernel File Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24997
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss