CVE-2018-8414: Microsoft Windows Shell Remote Code Execution Vulnerability

Published Aug 15, 2018

Updated

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.

Affected Software

14 affected components

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows Server=1709

Microsoft Windows Server=1803

Microsoft Windows

Microsoft Windows 10 1703

Microsoft Windows 10 1709

Microsoft Windows 10 1803

Microsoft Windows Server 1709

Microsoft Windows Server 1803

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8414

Event History

Aug 15, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Data Sourced

via NVD·05:29 PM

RemedyDescriptionSeverityWeaknessAffected Software

Mar 25, 2022

Known Exploited

via CISA·12:00 AM

Frequently Asked Questions

What is the severity of CVE-2018-8414?

CVE-2018-8414 is rated as critical due to its potential for remote code execution.

How do I fix CVE-2018-8414?

To fix CVE-2018-8414, Microsoft recommends applying the latest security updates for affected versions of Windows.

Which systems are affected by CVE-2018-8414?

CVE-2018-8414 affects various versions of Windows 10 including 1703, 1709, 1803 and Windows Server versions 1709 and 1803.

What type of vulnerability is CVE-2018-8414?

CVE-2018-8414 is a remote code execution vulnerability that occurs due to improper validation of file paths in Windows Shell.

Can CVE-2018-8414 be exploited remotely?

Yes, CVE-2018-8414 can be exploited remotely by an attacker, allowing them to run arbitrary code on the affected system.