VYPR
← All advisories
High severity8.8NVD Advisory· Published Apr 12, 2018· Updated Jun 17, 2026

CVE-2018-1004

CVE-2018-1004

Description

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Internet Explorer 9, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10.

Affected products

24
  • Microsoft/Internet Explorer3 versions
    cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: Windows Server 2008 for 32-bit Systems Service Pack 2
  • Microsoft/Windows 10 19096 versions
    cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
    • (no CPE)range: 32-bit Systems
  • Microsoft/Windows 72 versions
    cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
    • (no CPE)range: 32-bit Systems Service Pack 1
  • Microsoft/Windows 8.12 versions
    cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
    • (no CPE)range: 32-bit systems
  • Microsoft/Windows Rt 8.12 versions
    cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
    • (no CPE)range: Windows RT 8.1
  • Microsoft/Windows Server 20082 versions
    cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
    • (no CPE)range: Itanium-Based Systems Service Pack 1
  • Microsoft/Windows Server 20124 versions
    cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
    • (no CPE)range: (Server Core installation)
    • (no CPE)range: (Server Core installation)
  • Microsoft/Windows Server 20162 versions
    cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
    • (no CPE)range: (Server Core installation)
  • Microsoft/Vbscriptllm-fuzzy

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.