Summary
Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
How could an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by getting access to the local guest VM so they can attack the Host OS.
Security updates
10.0.17763.9020 — https://support.microsoft.com/help/5099538
10.0.20348.5386 — https://support.microsoft.com/help/5099540
10.0.19044.7548 — https://support.microsoft.com/help/5099539
10.0.26100.33158 — https://support.microsoft.com/help/5099536
10.0.26200.8875 — https://support.microsoft.com/help/5101650
10.0.28000.2525 — https://support.microsoft.com/help/5101649
Vulnerabilities 1
-
High 8.8
DirectX Graphics Kernel Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally.
Revision history
-
#1
Information published.
References
-
CVE-2026-50382 DirectX Graphics Kernel Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50382
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss