CVE-2018-8405

HIGHCISA KEV

7.8

Beschreibung

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8406.

CVE Details

CVSS v3.1 Bewertung7.8

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorLOCAL

KomplexitatLOW

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht8/15/2018

Zuletzt geandert10/28/2025

Quellekev

Honeypot-Sichtungen0

CISA KEV

HerstellerMicrosoft

ProduktDirectX Graphics Kernel (DXGKRNL)

SchwachstellennameMicrosoft DirectX Graphics Kernel Privilege Escalation Vulnerability

KEV Aufnahmedatum2022-03-28

Behebungsfrist2022-04-18

Ransomware-NutzungKnown

Betroffene Produkte

microsoft:windows_10_1507microsoft:windows_10_1607microsoft:windows_10_1703microsoft:windows_10_1709microsoft:windows_10_1803microsoft:windows_8.1microsoft:windows_rt_8.1microsoft:windows_server_1709microsoft:windows_server_1803microsoft:windows_server_2012microsoft:windows_server_2016

Schwachen (CWE)

CWE-404CWE-404

Referenzen

http://www.securityfocus.com/bid/105011(secure@microsoft.com)

http://www.securitytracker.com/id/1041461(secure@microsoft.com)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8405(secure@microsoft.com)

http://www.securityfocus.com/bid/105011(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1041461(af854a3a-2127-422b-91ae-364da2661108)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8405(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8405(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.