CVE-2018-8405

A Microsoft DirectX Graphics Kernel vulnerability allowed privilege escalation, actively exploited and linked to ransomware attacks, impacting DIB systems relying on DirectX drivers.

CVE-2018-8405 in the DirectX Graphics Kernel driver improperly handled memory objects, enabling privilege escalation. This vulnerability is actively exploited and has been linked to ransomware campaigns, posing a significant risk to DIB organizations using affected systems; immediate patching and vulnerability scanning are critical. Failure to address this could lead to compliance failures under NIST 800-171 and potential data breaches.

Shame score — The widespread exploitation and ransomware linkage demonstrate a significant failure in Microsoft's driver security, impacting a core component of many DIB systems.