Actively exploited in the wild

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft - DirectX Graphics Kernel (DXGKRNL) · Listed in the CISA KEV since 2022-03-28. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2018-8405

HighCVSS 7.8KEV

Published: 15/08/2018(UTC)Updated: 17/06/2026(UTC)Translated: 18/09/2026(UTC)NVD NIST

Summary

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory. This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.

Risk Assessment

A local attacker could elevate privileges to administrator level, enabling full control over the system.

Recommendation

Install the Microsoft security updates for the listed Windows versions.

Other vulnerabilities in DirectX Graphics Kernel

CVE-2018-8406HighActively exploited
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory. This affects Windows Server 2016, Windows 10, Windows 10 Servers.

Original NVD description (English source)

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8406.