CASCACascade Atlas

Evidence dossier

CVE-2018-8405

CVE-2018-8405

61.7–78.2Priority evidence range
As known Jul 21, 2026, 8:13 AM UTCgen-409cbd0c

Normalized restatement

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8406.

State
PUBLISHED
Published
Aug 15, 2018
Updated
Oct 21, 2025
Evidence coverage
85%
CISA KEVCatalog member

Apply updates per vendor instructions.

FIRST EPSS3.44%

2026-07-18 · v2026.06.15 · percentile 87.7%

Source stateNo scored conflict

Distinct CVSS assessments remain side by side; none are averaged.

Source comparison

Who said what

CISA-ADPindependent enrichment
container

CISA ADP Vulnrichment

CVEderivative copy
container

CVE Program Container

microsoftoriginal assertion
container

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8406.

CISA KEVoriginal assertion
observed_exploitation

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

FIRST EPSSoriginal assertion
model_probability

Probability 0.034440000000; percentile 0.876710000000

Applicability

Cited product scope

Trace impact →
16Underlying assertions
11Canonical products
16Target assertions
0Constraint assertions

Grouped from 1 configuration nodes in this exact generation. Visual grouping does not establish asset exposure or common root cause.

Identity source boundaries
  • cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z27d65b0f-b718-4b4f-bb79-c47c68d09dfa
  • cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z955dae73-7302-438b-aee1-058d7cc5d48e

17 scope groups

microsoft · source assertedMicrosoftWindows 10Direct source scope
[{"status": "affected", "version": "32-bit Systems"}, {"status": "affected", "version": "Version 1607 for 32-bit Systems"}, {"status": "affected", "version": "Version 1607 for x64-based Systems"}, {"status": "affected", "version": "Version 1703 for 32-bit Systems"}, {"status": "affected", "version": "Version 1703 for x64-based Systems"}, {"status": "affected", "version": "Version 1709 for 32-bit Systems"}, {"status": "affected", "version": "Version 1709 for x64-based Systems"}, {"status": "affected", "version": "Version 1803 for 32-bit Systems"}, {"status": "affected", "version": "Version 1803 for x64-based Systems"}, {"status": "affected", "version": "x64-based Systems"}]
unknown
microsoft · source assertedMicrosoftWindows 10 ServersDirect source scope
[{"status": "affected", "version": "version 1709 (Server Core Installation)"}, {"status": "affected", "version": "version 1803 (Server Core Installation)"}]
unknown
microsoft · source assertedMicrosoftWindows 8.1Direct source scope
[{"status": "affected", "version": "32-bit systems"}, {"status": "affected", "version": "x64-based systems"}]
unknown
microsoft · source assertedMicrosoftWindows RT 8.1Direct source scope
[{"status": "affected", "version": "Windows RT 8.1"}]
unknown
microsoft · source assertedMicrosoftWindows Server 2012 R2Direct source scope
[{"status": "affected", "version": "(Server Core installation)"}]
unknown
microsoft · source assertedMicrosoftWindows Server 2016Direct source scope
[{"status": "affected", "version": "(Server Core installation)"}]
unknown
NVD CPE · OPERATING SYSTEMmicrosoftwindows_10_1507Vulnerable target · 2 assertions
Version not applicableCanonical identity product-9851bd571b8ab08bca589cd73710badfef557d036f0fb7707f694f1c9f597cb4linked exact
supported
Inspect 2 returned assertions
  1. cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*
    Official link
    linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    a045ac0a-471e-444c-b3b0-4cabc23e8cfb
  2. cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*
    Official link
    linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 1
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    28a7fee9-b473-48a0-b0ed-a5cc1e44194c
NVD CPE · OPERATING SYSTEMmicrosoftwindows_10_1607Vulnerable target · 2 assertions
Version not applicableCanonical identity product-740fec3e9838b5eabe76ebe27e4d0d7a4cb2e0ef7e13923300d3d0b51e3fce1clinked exact
supported
Inspect 2 returned assertions
  1. cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*
    Official link
    linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 2
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    5e491e46-1917-41fe-8f9a-bb0bddeb42c3
  2. cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*
    Official link
    linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 3
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    0a1bc97a-263e-4291-8aef-02ee4e6031e9
NVD CPE · OPERATING SYSTEMmicrosoftwindows_10_1703Vulnerable target · 2 assertions
Version not applicableCanonical identity product-2f3550a8fd2528ab6e756c5ea638f5f3dc368adee47ca6f01d64918c0b9eb2a5linked exact
supported
Inspect 2 returned assertions
  1. cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x64:*
    Official link
    linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 4
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b98db3ff-cc3b-4e9f-a9cc-ec4c89af3b31
  2. cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x86:*
    Official link
    linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 5
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    8733bf37-7bf2-409d-9452-da8a92da1124
NVD CPE · OPERATING SYSTEMmicrosoftwindows_10_1709Vulnerable target · 2 assertions
Version not applicableCanonical identity product-d059dbfcd39652adfca6d48669484008cb5d4a8b33116c81ee002cd9101904aflinked exact
supported
Inspect 2 returned assertions
  1. cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x86:*
    Official link
    linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 7
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d76003fb-ee99-4d8e-b6a0-b13c2041e5a0
  2. cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x64:*
    Official link
    linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 6
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    469f95d3-abbb-4f1a-a000-be0f6bd60ff6
NVD CPE · OPERATING SYSTEMmicrosoftwindows_10_1803Vulnerable target · 2 assertions
Version not applicableCanonical identity product-5e821ea3746af154a469c180e78b9f4d663edf21461517987eed76740c7910c1linked exact
supported
Inspect 2 returned assertions
  1. cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:*
    Official link
    linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 8
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d82f8af7-ed01-4649-849e-f248f0e02384
  2. cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x86:*
    Official link
    linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 9
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c1cfb53b-b17b-47bd-bac1-c6c5d168ffb6
NVD CPE · OPERATING SYSTEMmicrosoftwindows_8.1Vulnerable target · 1 assertions
Version not applicableCanonical identity product-7e46de82012029583622f69d79b86bc210b5bd25b8cb3bb4468936702b23c4b0linked exact
supported
Inspect 1 returned assertions
  1. cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
    Official link
    linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 10
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    e93068db-549b-45ab-8e5c-00eb5d8b5cf8
NVD CPE · OPERATING SYSTEMmicrosoftwindows_rt_8.1Vulnerable target · 1 assertions
Version not applicableCanonical identity product-076c7e47c78d9425d54dea0b063ed7cd79e5f9f0bfdb3c9153b8aec4e71a7ad9linked exact
supported
Inspect 1 returned assertions
  1. cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
    Official link
    linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 11
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c6ce5198-c498-4672-af4c-77ab4be06c5c
NVD CPE · OPERATING SYSTEMmicrosoftwindows_server_1709Vulnerable target · 1 assertions
Version not applicableCanonical identity product-ff9203e1d48a9425faa287000b301451cdbb2a9defda0e208f1ce06fd168da7dlinked exact
supported
Inspect 1 returned assertions
  1. cpe:2.3:o:microsoft:windows_server_1709:-:*:*:*:*:*:*:*
    Official link
    linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 12
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    53695559-6e95-43c1-ad7c-1d99473223c2
NVD CPE · OPERATING SYSTEMmicrosoftwindows_server_1803Vulnerable target · 1 assertions
Version not applicableCanonical identity product-a74a0925fd770075058392e2bb7a5408e96a296354955527de213995d5070448linked exact
supported
Inspect 1 returned assertions
  1. cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:*:*
    Official link
    linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 13
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    37097c39-d588-4018-b94d-5eb87b1e3d5a
NVD CPE · OPERATING SYSTEMmicrosoftwindows_server_2012Vulnerable target · 1 assertions
Version r2Canonical identity product-5a80416e92fed0cddbb3d4f3840218b448dee11159824ad25a0353da566963felinked exact
supported
Inspect 1 returned assertions
  1. cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
    Official link
    linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 14
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    db18c4ce-5917-401e-acf7-2747084fd36e
NVD CPE · OPERATING SYSTEMmicrosoftwindows_server_2016Vulnerable target · 1 assertions
Version not applicableCanonical identity product-02e254d111ce604757a15650ef469f4f8365d6247da82ce3ac2695c3cfc7dc5flinked exact
supported
Inspect 1 returned assertions
  1. cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
    Official link
    linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 15
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    041ff8ba-0b12-4a1f-b4bf-9c4f33b7c1e7

Assessments

CVSS by origin

7.8
nvd@nist.govCVSS 3.1 · role PrimaryCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.2
nvd@nist.govCVSS 2.0 · role PrimaryAV:L/AC:L/Au:N/C:C/I:C/A:C
7.8
134c704f-9b21-4f2e-91b3-4a467353bcc0CVSS 3.1 · role SecondaryCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8
CISA-ADPCVSS 3.1 · role unknownCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Limitations and unknowns

  • KEV membership is authoritative for the catalog, not proof of exposure in any environment.
  • EPSS is a dated model probability and not an individual-environment prediction.
  • Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.
  • NVD-carried upstream facts remain derivative and are not independent corroboration.
  • Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
  • NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
  • Factor D remains unknown because WC-03 has not converted canonical CPE mappings into generation-bound mapping obligations; canonical identity alone does not score applicability.
  • Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.