HIGHCVSS 7.5KNOWN EXPLOITEDRANSOMWARE: KNOWN

CVE-2018-8174

CVE-2018-8174 updated by NVD

Published: 2022-02-15
Modified: 2026-09-21
Sources: cisa-kev, nvd

Summary

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

References

https://nvd.nist.gov/vuln/detail/CVE-2018-8174

Includes data from the CISA Known Exploited Vulnerabilities catalog.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.