CVE-2018-8174

KEV · Ransomware

Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

Vendor / Project: Microsoft
Product: Windows
Date added: Feb 15, 2022
Due date: Aug 15, 2022
Known ransomware use: Known
CWEs: CWE-787

Description

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-8174