CVE-2018-8174: Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Other sources
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"
— CISA
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-8174?
CVE-2018-8174 has a severity rating of critical, indicating a high potential for exploitation.
How do I fix CVE-2018-8174?
To fix CVE-2018-8174, apply the latest security updates provided by Microsoft for affected Windows versions.
What systems are affected by CVE-2018-8174?
CVE-2018-8174 affects multiple Windows operating systems, including Windows 7, Windows 8.1, Windows 10, and various Windows Server editions.
Can CVE-2018-8174 be exploited remotely?
Yes, CVE-2018-8174 is a remote code execution vulnerability, allowing attackers to execute arbitrary code on affected systems.
Is there a workaround for CVE-2018-8174?
A temporary workaround for CVE-2018-8174 includes disabling the VBScript engine by changing system settings.