8.8
High
CVE-2018-8414 Microsoft Windows Shell Remote Code Execution Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Weakness
CWE-20
Description
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows 10 Servers | Versions not published | |
| Windows 10 | Versions not published |
Other CVEs of Windows 10 Servers
The 201 CVEs of Windows 10 Servers →
CVE-2019-0580
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in…
Not rated
CVE-2019-0536
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka…
Not rated
CVE-2019-0571
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,…
Not rated
CVE-2019-0570
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka…
Not rated