vulnerability
Microsoft Windows: CVE-2018-8414: Windows Shell Remote Code Execution Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:M/Au:N/C:C/I:C/A:C) | Aug 14, 2018 | Aug 14, 2018 | Sep 3, 2025 |
Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Aug 14, 2018
Added
Aug 14, 2018
Modified
Sep 3, 2025
Description
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.
Solutions
microsoft-windows-windows_10-1703-kb4343885microsoft-windows-windows_10-1709-kb4343897microsoft-windows-windows_10-1803-kb4343909
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.