[ CVE-2018-8405 · Published 15 Aug 2018 ]
Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
Exploited · CISA KEV CVSS 7.8
EPSS 3%Fix available
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-03-28
- Known to be used in ransomware campaigns
[ Description ]Official description
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8406.
CISA: An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 18 Apr 2022): Apply updates per vendor instructions.
- Patch on portal.msrc.microsoft.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ References ]References
- www.securityfocus.com/bid/105011Broken LinkThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1041461Broken LinkThird Party AdvisoryVDB Entry
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8405PatchVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource