CVE-2018-1009

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability exists when Windows improperly handles objects in memory and incorrectly maps kernel memory, aka "Microsoft DirectX Graphics Kernel Subsystem Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Windows Server 2012 R2	(Server Core installation)
Microsoft	Windows RT 8.1	Windows RT 8.1
Microsoft	Windows Server 2012	(Server Core installation)
Microsoft	Windows Server 2016	(Server Core installation)
Microsoft	Windows 8.1	32-bit systems; x64-based systems
Microsoft	Windows 10	32-bit Systems; Version 1511 for 32-bit Systems; Version 1511 for x64-based Systems; Version 1607 for 32-bit Systems; Version 1607 for x64-based Systems; Version 1703 for 32-bit Systems; Version 1703 for x64-based Systems; Version 1709 for 32-bit Systems; Version 1709 for x64-based Systems; x64-based Systems
Microsoft	Windows 10 Servers	version 1709 (Server Core Installation)

References

http://www.securityfocus.com/bid/103654Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040673Third Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1009Patch, Vendor Advisory
http://www.securityfocus.com/bid/103654Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040673Third Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1009Patch, Vendor Advisory

Timeline

Published: Apr 12, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-100914.8AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow XSS.CVE-2018-100928.0The admin panel in Dolibarr before 7.0.2 might allow remote attackers to execute arbitrary commands by leveraging support for updating the a CVE-2018-100938.8AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.CVE-2018-100949.8SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer CVE-2018-100956.1Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the for CVE-2018-100964.8joyplus-cms 1.6.0 has XSS via the device_name parameter in a manager/admin_ajax.php?action=save flag=add request.CVE-2018-100976.1XSS exists in Domain Trader 2.5.3 via the recoverlogin.php email_address parameter.CVE-2018-100985.5In MicroWorld eScan Internet Security Suite (ISS) for Business 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send CVE-2018-100995.3Google Monorail before 2018-04-04 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected by CSRF, and calculat CVE-2018-10108.8A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso CVE-2018-101006.1Before WordPress 4.9.5, the redirection URL for the login page was not validated or sanitized if forced to use HTTPS.CVE-2018-101016.1Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server.