High severity8.8CISA KEVNVD Advisory· Published Aug 15, 2018· Updated Jun 17, 2026

CVE-2018-8414

Description

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/Windows Shellllm-fuzzy
Microsoft/Windows 10 1909cpe-rescue
Range: Version 1703 for 32-bit Systems
Microsoft/Windows Server 2003cpe-rescue
Range: version 1709 (Server Core Installation)

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8414nvdPatchVendor Advisory
www.securityfocus.com/bid/105016nvdBroken LinkThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041458nvdBroken LinkThird Party AdvisoryVDB Entry
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.059
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.000