CVE-2018-8174KEV · OVERDUECWE-787

Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

High · published May 9, 2018

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.5. It is confirmed in active exploitation. It sits in the 99.8th percentile for exploit probability.

1530
days past CISA
deadline
CVSS v3.1
7.5
EPSS
88%
Percentile
99.8
In the wild
Confirmed
What it is

🚨 A tiny misstep in the VBScript engine can lead to full remote code execution! Think of this as a backdoor left ajar in a bustling hotel, just waiting for someone to stroll right in. 🔥 Imagine a high-class restaurant where the staff mistakenly serve dishes containing hidden allergens that could endanger customers. That's what this vulnerability does—it allows an attacker to execute malicious code as if they were a trusted chef in the kitchen, taking over the system without anyone realizing it. An attacker exploiting this vulnerability could run any code they want on the victim's machine, leading to devastating consequences like data theft, system compromises, or even complete control over the affected devices. With multiple versions of Windows affected, the risk is alarmingly high!

Put simply

Imagine a high-class restaurant where the staff mistakenly serve dishes containing hidden allergens that could endanger customers. That's what this vulnerability does—it allows an attacker to execute malicious code as if they were a trusted chef in the kitchen, taking over the system without anyone realizing it. This vulnerability in the VBScript engine allows for remote code execution due to improper handling of objects in memory. Attackers can craft a malicious script that, when executed, can lead to unauthorized actions on the machine.

What to do

An attacker exploiting this vulnerability could run any code they want on the victim's machine, leading to devastating consequences like data theft, system compromises, or even complete control over the affected devices. With multiple versions of Windows affected, the risk is alarmingly high! To guard against this vulnerability, make sure to apply the latest security patches from Microsoft immediately. Enable script blocking where possible, and educate users to be cautious of unexpected scripts in emails or web content. Regularly update your systems to stay protected! You've got the power to fix this! Follow these steps and you'll bolster your defenses in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.88243 · 99.8th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2018-05-09T23:29Z
KEV added
2022-02-15 · due 2022-08-15
Affected products (13)
ProductVersionsFixed in
microsoft/windows_10_1607all versions—
microsoft/windows_10_1703all versions—
microsoft/windows_10_1709all versions—
microsoft/windows_10_1803all versions—
microsoft/windows_7all versions—
microsoft/windows_8.1all versions—
microsoft/windows_rt_8.1all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2016all versions—
References (9)
EPSS history
Timeline
  • 15 FEB 00:00Z
    Added to CISA KEV — remediate by Aug 15
    kev
  • 09 MAY 19:00Z
    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution…
    cvelistv5