{"id":"CVE-2018-8554","aliases":["EUVD-2018-20174","GHSA-phrx-vrcg-3v5j"],"status":"published","title":"An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory,...","description":"An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka \"DirectX Elevation of Privilege Vulnerability.\" This affects Windows 10 Servers, Windows 10, Windows Server 2019. This CVE ID is unique from CVE-2018-8485, CVE-2018-8561.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01192,"percentile":0.68211,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-404"],"published":"2018-11-14T01:00:00Z","modified":"2026-06-17T02:05:05Z","products":[{"vendor":"microsoft","product":"windows 10"},{"vendor":"microsoft","product":"windows 10 servers"},{"vendor":"microsoft","product":"windows server 2019"},{"vendor":"microsoft","product":"windows_10"},{"vendor":"microsoft","product":"windows_server"},{"vendor":"microsoft","product":"windows_server_2019"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8554","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/105811","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1042135","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8554"},{"url":"https://github.com/advisories/GHSA-phrx-vrcg-3v5j"}],"sources":{"cve":[{"id":"CVE-2018-8554","description":"An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka \"DirectX Elevation of Privilege Vulnerability.\" This affects Windows 10 Servers, Windows 10, Windows Server 2019. This CVE ID is unique from CVE-2018-8485, CVE-2018-8561.","status":"published","published":"2018-11-14T01:00:00Z","modified":"2024-08-05T07:02:24.988Z","updated_at":"2026-11-02T14:35:04.172099Z"}],"euvd":[{"id":"EUVD-2018-20174","description":"An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka \"DirectX Elevation of Privilege Vulnerability.\" This affects Windows 10 Servers, Windows 10, Windows Server 2019. This CVE ID is unique from CVE-2018-8485, CVE-2018-8561.","status":"published","published":"2018-11-14T01:00:00Z","modified":"2024-08-05T07:02:24Z","updated_at":"2026-11-03T02:40:02.600498Z"}],"ghsa":[{"id":"GHSA-phrx-vrcg-3v5j","title":"An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory,...","description":"An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka \"DirectX Elevation of Privilege Vulnerability.\" This affects Windows 10 Servers, Windows 10, Windows Server 2019. This CVE ID is unique from CVE-2018-8485, CVE-2018-8561.","status":"published","published":"2022-05-13T01:53:46Z","modified":"2023-02-02T05:02:24Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:51:26.066709Z"}],"nvd":[{"id":"CVE-2018-8554","description":"An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka \"DirectX Elevation of Privilege Vulnerability.\" This affects Windows 10 Servers, Windows 10, Windows Server 2019. This CVE ID is unique from CVE-2018-8485, CVE-2018-8561.","status":"published","published":"2018-11-14T01:29:01.237Z","modified":"2026-06-17T02:05:05.44Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:04:47.196456Z"}]}}