ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.8.

Jak se o tom psalo 2

1. 1. 10. 2026 · zachyceno 21:01 · Zero Day Initiative US nadpis události

   ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

   This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-50375.

2. 14. 7. 2026 · Microsoft Security US

   CVE-2026-50375 DirectX Graphics Kernel Elevation of Privilege Vulnerability

   Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.