Firetruck

CVE-2018-8414

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Windows 10Microsoft / Windows 10Version 1703 for 32-bit Systemsaffected
Windows 10Microsoft / Windows 10Version 1703 for x64-based Systemsaffected
Windows 10Microsoft / Windows 10Version 1709 for 32-bit Systemsaffected
Windows 10Microsoft / Windows 10Version 1709 for x64-based Systemsaffected
Windows 10Microsoft / Windows 10Version 1803 for 32-bit Systemsaffected
Windows 10Microsoft / Windows 10Version 1803 for x64-based Systemsaffected
Windows 10 ServersMicrosoft / Windows 10 Serversversion 1709 (Server Core Installation)affected
Windows 10 ServersMicrosoft / Windows 10 Serversversion 1803 (Server Core Installation)affected