Unrated severityCISA KEVNVD Advisory· Published May 9, 2018· Updated Oct 21, 2025
CVE-2018-8174
CVE-2018-8174
Description
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Affected products
10- Microsoft/Windows 10v5Range: 32-bit Systems
- Microsoft/Windows 10 Serversv5Range: version 1709 (Server Core Installation)
- Microsoft/Windows 7v5Range: 32-bit Systems Service Pack 1
- Microsoft/Windows 8.1v5Range: 32-bit systems
- Microsoft/Windows RT 8.1v5Range: Windows RT 8.1
- Microsoft/Windows Server 2008v5Range: 32-bit Systems Service Pack 2
- Microsoft/Windows Server 2008 R2v5Range: Itanium-Based Systems Service Pack 1
- Microsoft/Windows Server 2012v5Range: (Server Core installation)
- Microsoft/Windows Server 2012 R2v5Range: (Server Core installation)
- Microsoft/Windows Server 2016v5Range: (Server Core installation)
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.exploit-db.com/exploits/44741/mitreexploitx_refsource_EXPLOIT-DB
- www.securityfocus.com/bid/103998mitrevdb-entryx_refsource_BID
- blog.0patch.com/2018/05/a-single-instruction-micropatch-for.htmlmitrex_refsource_MISC
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8174mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.