CVE-2018-8406

KEV · Ransomware

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

View CVE record →

Vendor / Project: Microsoft
Product: DirectX Graphics Kernel (DXGKRNL)
Date added: Mar 28, 2022
Due date: Apr 18, 2022
Known ransomware use: Known
CWEs: CWE-404

Description

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-8406