CVE-2018-8414 — VulnIntel

CVE-2018-8414

HIGH

KEV

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.

StatusAnalyzed

설명

Score Summary

CVSS Score: 8.8
Version: 3.1
VPI: 100
Why this VPI (explainable, experimental)
VPI breakdown
Impact 88.00
Exploitation signal(KEV listed) ×1.50
VPI 100.00
VPI formula vpi-v1
EPSS: 74.0%
(상위 99.4%)
Attack Vector: Network
Low Complexity
No Privileges
User Interaction Required
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

Published: 08/15/2018(8 years ago)
Modified: 10/28/2025(9 months ago)
Source: KEV, NVD
Products: 5

CISA KEV Listing

Vendor / Project: Microsoft
Product: Windows

Date Added: 03/25/2022
Due Date: 04/15/2022Overdue 1559d

Required Action

Apply updates per vendor instructions.

Vulnerability Lifecycle

NVDPublished08/15/2018
CISA KEVKEV Listed03/25/2022
CISA KEV

Score Comparison by Source

Source	CVSS Version	Base Score	Severity	Vector String	Assessment Date
NVDNIST	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	04/20/2026
NVDNIST	2.0	9.3

CWE Weakness Classification

CWE-20
NVD
Secondary

References (4)

NVD
Third Party Advisory
http://www.securityfocus.com/bid/105016
NVD
Third Party Advisory
http://www.securitytracker.com/id/1041458
NVD
Patch

Affected Products (5)

Impact	88.00
Exploitation signal(KEV listed)	×1.50
VPI	100.00