CVE-2025-68623
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft DirectX End-User Runtime Web Installer是美国微软（Microsoft）公司的一个组件安装工具。 Microsoft DirectX End-User Runtime Web Installer 9.29.1974.0版本存在安全漏洞，该漏洞源于安装过程中低权限用户可替换可执行文件，可能导致权限提升。
Possible ATT&CK Techniques 3 AI
T1068 · Exploitation for Privilege Escalation T1055.004 · Asynchronous Procedure Call T1574.002
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-68623
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
In Microsoft DirectX End-User Runtime Web Installer 9.29.1974.0, a low-privilege user can replace an executable file during the installation process, which may result in unintended elevation of privileges. During installation, the installer runs with HIGH integrity and downloads executables and DLLs to the %TEMP% folder - writable by standard users. Subsequently, the installer executes the downloaded executable with HIGH integrity to complete the application installation. However, an attacker can replace the downloaded executable with a malicious, user-controlled executable. When the installer executes this replaced file, it runs the attacker's code with HIGH integrity. Since code running at HIGH integrity can escalate to SYSTEM level by registering and executing a service, this creates a complete privilege escalation chain from standard user to SYSTEM. NOTE: The Supplier disputes this record stating that they have determined this to be the behavior as designed.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft DirectX End-User Runtime Web Installer 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft DirectX End-User Runtime Web Installer是美国微软（Microsoft）公司的一个组件安装工具。 Microsoft DirectX End-User Runtime Web Installer 9.29.1974.0版本存在安全漏洞，该漏洞源于安装过程中低权限用户可替换可执行文件，可能导致权限提升。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2025-68623
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-68623
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-68623 (1)
Other References for CVE-2025-68623 (1)
Same Patch Batch · n/a · 2026-03-11 · 20 CVEs total
| CVE-2026-3955 | 6.3 MEDIUM | elecV2P jsfile Endpoint wbjs.js runJSFile code injection |
| CVE-2026-3884 | 6.1 MEDIUM | spin.js 安全漏洞 |
| CVE-2026-3964 | 5.3 MEDIUM | OpenAkita Chat API Endpoint shell.py run os command injection |
| CVE-2026-3946 | 3.5 LOW | PHPEMS index.php cross site scripting |
| CVE-2025-67037 | Lantronix EDS5000 安全漏洞 | |
| CVE-2025-70041 | ThermaKube 安全漏洞 | |
| CVE-2025-70024 | generatedata 安全漏洞 | |
| CVE-2025-66956 | Asseco SEE Live 安全漏洞 | |
| CVE-2025-70082 | Lantronix EDS3000PS 安全漏洞 | |
| CVE-2025-67039 | Lantronix EDS3000PS 安全漏洞 | |
| CVE-2025-70027 | sunbird-portal 安全漏洞 | |
| CVE-2025-67036 | Lantronix EDS5000 安全漏洞 | |
| CVE-2025-67034 | Lantronix EDS5000 安全漏洞 | |
| CVE-2025-67038 | Lantronix EDS5000 安全漏洞 | |
| CVE-2025-67035 | Lantronix EDS5000 安全漏洞 | |
| CVE-2025-67041 | Lantronix EDS3000PS 安全漏洞 | |
| CVE-2026-30741 | OpenClaw 安全漏洞 | |
| CVE-2025-67298 | ClassroomIO.com 安全漏洞 | |
| CVE-2025-70330 | Orbis Easy Grade Pro 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2025-68623
No comments yet