CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–2 of 2 advisories (Page 1/1)

CVE-2018-84067.8/HIGHEPSS 3.4%CISA KEV

2018-08-15

Windows DirectX Graphics Kernel (DXGKRNL) Elevation of Privilege Vulnerability (CVE-2018-8406)

[Affected Scope] Windows 10, Windows Server 2016, and Windows 10-based Servers.

[Impact] A local attacker can execute arbitrary code in kernel mode, leading to complete system takeover (SYSTEM privileges).

[Mitigation] Apply the official Microsoft security patches immediately and restrict local access on unpatched systems.

CVE-2018-84057.8/HIGHEPSS 3.4%CISA KEV

2018-08-15

[Affected Scope] Windows 8.1, 10, Windows Server 2012 R2, 2016, and Windows RT 8.1

[Impact] A local attacker can execute arbitrary code in kernel mode, completely compromising the system and gaining SYSTEM privileges

[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict unauthorized local access