CVE-2026-50375: DirectX Graphics Kernel Elevation of Privilege Vulnerability

Q: Who is exposed to this vulnerability?

Systems running the listed Microsoft Windows desktop or server products are in scope, including Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025. Exploitation is local, so an attacker must already be able to run code on the affected system.

Q: What access does an attacker need to exploit it?

The attacker needs authorized local access and low privileges. No user interaction is required, but the attack complexity is rated high.

Q: What is the likely impact if exploitation succeeds?

A successful exploit can elevate the attacker’s privileges on the local Windows system. The supplied vector indicates high integrity and availability impact, with no confidentiality impact.

Published Jul 14, 2026

Updated

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Other sources

Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.

— Microsoft

Affected Software

36 affected componentsFixes available

Microsoft Windows 10=21H2

10.0.19044.7548

Microsoft Windows 10=21H2

10.0.19044.7548

Microsoft Windows Server 2019<10.0.17763.9020

10.0.17763.9020

Microsoft Windows Server 2022<10.0.20348.5386

10.0.20348.5386

Microsoft Windows 10=1809

10.0.17763.9020

Microsoft Windows 10=1809

10.0.17763.9020

Microsoft Windows 11=24H2

10.0.26100.8875

Microsoft Windows Server 2025<10.0.26100.33158

10.0.26100.33158

Microsoft Windows 11=26H1

10.0.28000.2525

Microsoft Windows Server 2019<10.0.17763.9020

10.0.17763.9020

Microsoft Windows 11=25H2

10.0.26200.8875

Microsoft Windows 11=24H2

10.0.26100.8875

Microsoft Windows Server 2025<10.0.26100.33158

10.0.26100.33158

Microsoft Windows 11=25H2

10.0.26200.8875

Microsoft Windows 10=22H2

10.0.19045.7548

Microsoft Windows 10=22H2

10.0.19045.7548

Microsoft Windows 10=22H2

10.0.19045.7548

Microsoft Windows 10=21H2

10.0.19044.7548

Microsoft Windows 10 1809<10.0.17763.9020

Microsoft Windows 10 21h2<10.0.19044.7548

Microsoft Windows 10 22h2<10.0.19045.7548

Microsoft Windows 11 24h2<10.0.26100.8875

Microsoft Windows 11 25h2<10.0.26200.8875

Microsoft Windows 11 26h1<10.0.28000.2269

Microsoft Windows 11 26h1<10.0.28000.2525

Microsoft Windows Server 2019<10.0.17763.9020

Microsoft Windows Server 2022<10.0.20348.5386

Microsoft Windows Server 2025<10.0.26100.33158

Microsoft Windows 11=26H1

10.0.28000.2525

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.7548Patch KB5099539
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9020Patch KB5099538
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5386Patch KB5099540
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.8875Patch KB5101650
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33158Patch KB5099536
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.2525Patch KB5101649
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.8875Patch KB5101650
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.7548Patch KB5099539

Event History

Jul 14, 2026

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeaknessAffected Software

CVE Published

via MITRE·05:06 PM

Data Sourced

via MITRE·05:06 PM

DescriptionSeverity

Data Sourced

via NVD·06:17 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Who is exposed to this vulnerability?

Systems running the listed Microsoft Windows desktop or server products are in scope, including Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025. Exploitation is local, so an attacker must already be able to run code on the affected system.

What access does an attacker need to exploit it?

The attacker needs authorized local access and low privileges. No user interaction is required, but the attack complexity is rated high.

What is the likely impact if exploitation succeeds?

A successful exploit can elevate the attacker’s privileges on the local Windows system. The supplied vector indicates high integrity and availability impact, with no confidentiality impact.

CVE-2026-50375: DirectX Graphics Kernel Elevation of Privilege Vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this vulnerability?

What access does an attacker need to exploit it?

What is the likely impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this vulnerability?

What access does an attacker need to exploit it?

What is the likely impact if exploitation succeeds?