CVE-2018-8405
Published 2018-08-15 · Updated 2026-06-17 · Source secure@microsoft.com
Summary
CVE-2018-8405 is a high-severity (CVSS 7.8) vulnerability in Microsoft DirectX Graphics Kernel (DXGKRNL). CISA added it to the Known Exploited Vulnerabilities catalog on March 28, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by April 18, 2022. CISA also lists it as known to be used in ransomware campaigns, so it should be prioritised accordingly. Microsoft has 390 vulnerabilities in the KEV catalog, 117 of them linked to ransomware.
All 390 known-exploited Microsoft vulnerabilities →Description
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8406.
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: Microsoft — DirectX Graphics Kernel (DXGKRNL)
Name: Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
Date added: 2022-03-28 · Due: 2022-04-18
Required action: Apply updates per vendor instructions.
References
- http://www.securityfocus.com/bid/105011
- http://www.securitytracker.com/id/1041461
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8405
- http://www.securityfocus.com/bid/105011
- http://www.securitytracker.com/id/1041461
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8405
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8405