Skip to content
COOEY

FAIL › dossier

DirectX Graphics Kernel (DXGKRNL)

PRODUCT

· dossier confidence 90%

DXGKRNL is a Microsoft graphics kernel driver with a critical security history of actively exploited privilege escalation and remote code execution vulnerabilities that have directly impacted defense-industrial-base systems and enabled ransomware attacks.

Failure events
2
Zero-days
0
RCEs
1
On KEV
2
Critical
2
Worst shame
80
PROFILE
Categorygraphics driverWhat they doDirectX Graphics Kernel (DXGKRNL) is a Microsoft kernel-mode driver that manages DirectX graphics operations.
SECURITY POSTURE

The DXGKRNL driver has a critical track record of severe, actively exploited privilege escalation and remote code execution vulnerabilities that directly impacted defense-industrial-base systems.

Notable failures
  • CVE-2018-8406 privilege escalation exploited in ransomware
  • CVE-2018-8405 remote code execution exploited in ransomware
Patterns: critical kernel-mode driver vulnerabilities actively exploited for ransomware
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2022-03-28 CVE-2018-8406 critical A Microsoft DirectX Graphics Kernel vulnerability allowed privilege escalation, actively exploited and linked to ransomware attacks, impacting DIB systems relying on DirectX drivers.
2022-03-28 CVE-2018-8405 critical A Microsoft DirectX Graphics Kernel vulnerability allowed privilege escalation, actively exploited and linked to ransomware attacks, impacting DIB systems relying on DirectX drivers.
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-29 04:08:04.270341+00:00