CVE-2018-8406: Microsoft Windows Server 2016 vulnerability

1. In CISA KEVCISA KEV catalogue28 Mar 2022
2. Exploited (reported): not seen
3. Scanning observed: not seen
4. Proof of concept public: not seen
5. Not established: not seen

DescriptionCVE.org

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8405.

• Microsoft · Windows Server 2016(Server Core installation)
• Microsoft · Windows 1032-bit Systems; Version 1607 for 32-bit Systems; Version 1607 for x64-based Systems; Version 1703 for 32-bit Systems; Version 1703 for x64-based Systems; Version 1709 for 32-bit Systems and 4 more
• Microsoft · Windows 10 Serversversion 1709 (Server Core Installation); version 1803 (Server Core Installation)

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.

CISA KEV

Listed since 28 Mar 2022 · known ransomware use · catalogue entry

Public check

No public nuclei template

Weakness

Improper Resource Shutdown or Release · Denial of Service

Vendor

Microsoft

Published

August 2018

Band

Exploited in the wild, August 2018

1. 5 Nov
   CISA’s KEV entry now notes known ransomware use CISA
2. 28 Mar 2022
   CISA added it to the KEV catalogue CISA

• NVD entrynvd.nist.gov
• CISA KEV cataloguecisa.gov
• CVE recordcve.org
• Weakness CWE-404cwe.mitre.org
• securityfocus.com/bid/105012securityfocus.com
• securitytracker.com/id/1041461securitytracker.com
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2portal.msrc.microsoft.com