CVE-2018-8420

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution…

published September 13, 2018

CVSS
—
EPSS
49%
Percentile
98.9
In the wild
Unconfirmed
What it is

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.48901 · 98.9th percentile
Published
2018-09-13T00:00Z
EPSS history
Timeline
  • 22 SEP 03:16Z
    EPSS moved 49% → 35%
    epss
  • 06 SEP 03:12Z
    EPSS moved 49% → 35%
    epss
  • 30 AUG 16:01Z
    EPSS moved 35% → 49%
    epss
  • 29 AUG 04:43Z
    EPSS moved 49% → 35%
    epss
  • 13 SEP 00:00Z
    A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution…
    cvelistv5