AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-8406

HIGH · CVSS 7.8 EPSS 3.44% CISA KEV · Actively Exploited

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-08-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CISA KEV Details

Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.

Ransomware use: Known

Added to KEV: 2022-03-28

Required action: Apply updates per vendor instructions.

CVE
CVE-2018-8406
Severity
HIGH
CVSS
7.8
EPSS
3.44%
Windows

Original NVD Description

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8405.