{"id":"CVE-2018-8406","aliases":["EUVD-2018-20044","GHSA-mxvv-3vrg-ch3p"],"status":"published","title":"An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver...","description":"An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka \"DirectX Graphics Kernel Elevation of Privilege Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8405.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03444,"percentile":0.89079,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":false,"fix_available":false},"cwes":["CWE-404"],"published":"2018-08-15T17:00:00Z","modified":"2026-06-17T02:04:47Z","kev":{"date_added":"2022-03-28","due_date":"2022-04-18","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Known"},"exploitation":[{"source":"euvd","since":"2022-03-28"},{"source":"kev","since":"2022-03-28"}],"products":[{"vendor":"microsoft","product":"directx graphics kernel (dxgkrnl)"},{"vendor":"microsoft","product":"windows 10"},{"vendor":"microsoft","product":"windows 10 servers"},{"vendor":"microsoft","product":"windows server 2016"},{"vendor":"microsoft","product":"windows_10_1507"},{"vendor":"microsoft","product":"windows_10_1607"},{"vendor":"microsoft","product":"windows_10_1703"},{"vendor":"microsoft","product":"windows_10_1709"},{"vendor":"microsoft","product":"windows_10_1803"},{"vendor":"microsoft","product":"windows_server_1709"},{"vendor":"microsoft","product":"windows_server_1803"},{"vendor":"microsoft","product":"windows_server_2016"}],"references":[{"url":"http://www.securityfocus.com/bid/105012","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041461","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8406","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8406","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8406"},{"url":"https://github.com/advisories/GHSA-mxvv-3vrg-ch3p"}],"sources":{"cve":[{"id":"CVE-2018-8406","description":"An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka \"DirectX Graphics Kernel Elevation of Privilege Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8405.","status":"published","published":"2018-08-15T17:00:00Z","modified":"2025-10-21T23:45:48.66Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:35:04.540365Z"}],"euvd":[{"id":"EUVD-2018-20044","description":"An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka \"DirectX Graphics Kernel Elevation of Privilege Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8405.","status":"published","published":"2018-08-15T17:00:00Z","modified":"2025-10-21T23:45:48Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2022-03-28","updated_at":"2026-11-02T20:31:23.427989Z"}],"ghsa":[{"id":"GHSA-mxvv-3vrg-ch3p","title":"An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver...","description":"An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka \"DirectX Graphics Kernel Elevation of Privilege Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8405.","status":"published","published":"2022-05-13T01:53:41Z","modified":"2025-10-22T00:31:36Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T15:04:04.176931Z"}],"kev":[{"id":"CVE-2018-8406","title":"Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability","description":"An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.","cwes":["CWE-404"],"kev":{"date_added":"2022-03-28","due_date":"2022-04-18","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Known"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2018-8406","description":"An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka \"DirectX Graphics Kernel Elevation of Privilege Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8405.","status":"published","published":"2018-08-15T17:29:10.157Z","modified":"2026-06-17T02:04:47.65Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:04:36.842579Z"}]}}