BaseFortify

Publication date: 2025-10-14

Last updated on: 2025-10-31

Assigner: Microsoft Corporation

Description

Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-14

Last Modified

2025-10-31

Generated

2026-07-06

AI Q&A

2025-10-14

EPSS Evaluated

2026-07-04

NVD

CVE-2025-55698

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	windows_11_24h2	to 10.0.26100.6899 (exc)
microsoft	windows_11_25h2	to 10.0.26200.6899 (exc)
microsoft	windows_server_2025	to 10.0.26100.6899 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability is a null pointer dereference in Windows DirectX that allows an authorized attacker to cause a denial of service over a network.

Impact Analysis

An attacker with authorized access can exploit this vulnerability to cause a denial of service, potentially disrupting availability of affected systems or services.

Hi! I’m here to help you understand CVE-2025-55698. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70