CVE-2018-8401

7.8 highEPSS 2.1%

High (7.8) in microsoft. EPSS 2.1% chance of exploitation in the next 30 days.

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8405, CVE-2018-8406.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-404
Published: 2018-08-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10
microsoft:windows_server_2016

References

http://www.securityfocus.com/bid/105006
http://www.securitytracker.com/id/1041461
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8401
http://www.securityfocus.com/bid/105006
http://www.securitytracker.com/id/1041461

Check your stack JSON