Skip to content
OpenAdvisories
Critical MSRC-CVE-2025-55226 1 CVE

Graphics Kernel Remote Code Execution Vulnerability

Published Sep 9, 2025 · Updated Sep 9, 2025

Summary

Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.

According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.
For example, when the score indicates that the Attack Vector is Local and User Interaction is Required, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.

According to the CVSS metric, user interaction is required (UI:R) and privileges required is Low (PR:L). What does that mean for this vulnerability?
An authorized attacker with privileges could send controlled inputs to exploit this vulnerability.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.

Security updates
10.0.17763.7792 — https://support.microsoft.com/help/5065428
10.0.20348.4171 — https://support.microsoft.com/help/5065432
10.0.20348.4106 — https://support.microsoft.com/help/5065306
10.0.19044.6332 — https://support.microsoft.com/help/5065429
10.0.22621.5909 — https://support.microsoft.com/help/5065431
10.0.26100.6584 — https://support.microsoft.com/help/5065426
10.0.26100.6508 — https://support.microsoft.com/help/5065474
10.0.25398.1849 — https://support.microsoft.com/help/5065425
10.0.10240.21128 — https://support.microsoft.com/help/5065430
10.0.14393.8422 — https://support.microsoft.com/help/5065427
6.0.6003.23529 — https://support.microsoft.com/help/5065508
6.0.6003.23529 — https://support.microsoft.com/help/5065511
6.1.7601.27929 — https://support.microsoft.com/help/5065468
6.1.7601.27929 — https://support.microsoft.com/help/5065510
6.2.9200.25675 — https://support.microsoft.com/help/5065509
6.3.9600.22774 — https://support.microsoft.com/help/5065507

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References