8.8
High
Exploited
CVE-2018-8414 Microsoft Windows Shell Remote Code Execution Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Weakness
CWE-20
Description
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows 10 Servers | Versions not published | |
| Windows 10 | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- 105016 www.securityfocus.com
- 1041458 www.securitytracker.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Windows 10 Servers
The 201 CVEs of Windows 10 Servers →
CVE-2019-0576
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in…
Not rated
CVE-2019-0571
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,…
Not rated
CVE-2019-0552
An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege…
Not rated
CVE-2019-0554
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka…
Not rated