PT-2018-1657 · Microsoft · Directx Graphics Kernel+3

Published 2018-09-11 · Updated 2019-10-03 · CVE-2018-8462

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 10 Servers

Description The issue is related to the DirectX Graphics Kernel (DXGKRNL) driver improperly handling objects in memory. This can allow an attacker to run processes with elevated privileges.

Recommendations For Windows Server 2016, update the DirectX Graphics Kernel driver to a version that properly handles objects in memory. For Windows 10, update the DirectX Graphics Kernel driver to a version that properly handles objects in memory. For Windows 10 Servers, update the DirectX Graphics Kernel driver to a version that properly handles objects in memory.

Fix

LPE

Buffer Overflow

Improper Resource Release

Weakness Enumeration

CWE-119

CWE-404

Related Identifiers

BDU:2018-01216

CVE-2018-8462

Affected Products

Directx Graphics Kernel

Windows

Windows 10

Windows Server 2016

References · 8

• https://osv.dev/vulnerability/CVE-2018-8462 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8462 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8462 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-8462 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8462 · Security Note
• https://bdu.fstec.ru/vul/2018-01216 · Security Note
• http://securityfocus.com/bid/105274 · Note
• http://securitytracker.com/id/1041629 · Note