CVE-2025-55698 is a high-severity null pointer dereference vulnerability in Microsoft Windows DirectX, affecting Windows 11 versions 24H2 and 25H2, and Windows Server 2025. An authorized attacker can exploit this over a network to cause a denial of service. With a CVSS score of 7.7, this vulnerability has a low attack complexity and requires no user interaction, posing a significant availability risk. While not currently in CISA's KEV catalog and lacking public exploit code, it has garnered notable community discussion and media coverage, indicating awareness despite no active exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 10.0.26100.6899CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:* | ||
< 10.0.26200.6899CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:* | ||
<= 10.0.26100.6899CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.