high8.8Known exploited
CVE-2018-8414
Microsoft Windows Shell Remote Code Execution Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-25. Federal due date: 2022-04-15.
Apply updates per vendor instructions.
Impact
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 1703 | All versions |
| Microsoft | Windows 10 1709 | All versions |
| Microsoft | Windows 10 1803 | All versions |
| Microsoft | Windows Server 1709 | All versions |
| Microsoft | Windows Server 1803 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://www.securityfocus.com/bid/105016
- http://www.securitytracker.com/id/1041458
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8414
- http://www.securityfocus.com/bid/105016
- http://www.securitytracker.com/id/1041458
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8414
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8414