PT-2026-58668 · Microsoft · Directx+1

CVE-2026-58629 · Published 2026-07-14 · Updated 2026-07-15

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows DirectX (affected versions not specified)

Description A use-after-free and double-free condition exists in the dxgkrnl component. The issue occurs during the rollback process for a failed D3DKMTCreateAllocation() function call, where the system re-reads an allocation handle directly from user memory and frees the specified handle instead of the newly created one. This allows an authorized local attacker to elevate privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-09824

CVE-2026-58629

Affected Products

Directx

Windows

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-58629 · Security Note
• https://bdu.fstec.ru/vul/2026-09824 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-58629 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58629 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-58629 · Security Note
• https://twitter.com/windowsforum/status/2077511859297489371 · Twitter Post
• https://twitter.com/_gengstah/status/2077336537688424632 · Twitter Post