CVE-2025-50176

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorized attacker to execute code locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122CWE-843

Affected software

No affected versions have been published.

Timeline

Published
Aug 12, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-501778.1Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.CVE-2025-501786.6GitForge.jl is a unified interface for interacting with Git "forges." Versions prior to 0.4.3 lack input validation for user provided valuesCVE-2025-501794.3Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a cross-site request CVE-2025-50187.1The Hive Support plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on theCVE-2025-501807.5esm.sh is a no-build content delivery network (CDN) for web development. In version 136, esm.sh is vulnerable to a full-response SSRF, allowCVE-2025-501816.1urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiaCVE-2025-501826.1urllib3 is a user-friendly HTTP client library for Python. Starting in version 2.2.0 and prior to 2.5.0, urllib3 does not control redirects CVE-2025-501836.5OpenList Frontend is a UI component for OpenList. Prior to version 4.0.0-rc.4, a vulnerability exists in the file preview/browsing feature oCVE-2025-501847.1DbGate is cross-platform database manager. In versions 6.4.3-premium-beta.5 and below, DbGate is vulnerable to a directory traversal flaw. TCVE-2025-501857.0DbGate is cross-platform database manager. In versions 6.6.0 and below, DbGate allows unauthorized file access due to insufficient validatioCVE-2025-501864.8Chamilo is a learning management system. Prior to version 1.11.30, a stored cross-site scripting (XSS) vulnerability exists due to insufficiCVE-2025-501879.8Chamilo is a learning management system. Prior to version 1.11.28, parameter from SOAP request is evaluated without filtering which leads to
CVE-2025-50176: High severity, CVSS 7.8 | Vulnix