High severity7.8CISA KEVNVD Advisory· Published Aug 15, 2018· Updated Jun 17, 2026

CVE-2018-8406

Description

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8405.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/Windows Server 2016llm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: (Server Core installation)
Microsoft/Windows 10 1909llm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 32-bit Systems
Microsoft/Windows Server 2003cpe-rescue
Range: version 1709 (Server Core Installation)

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8406nvdPatchVendor Advisory
www.securityfocus.com/bid/105012nvdBroken LinkThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041461nvdBroken LinkThird Party AdvisoryVDB Entry
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.003
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.060