Live › vulnerability › CVE-2018-8414
Go to dashboardA flaw in the Windows Shell does not properly validate file paths, allowing remote code execution. An attacker who can get a user to open a crafted file or link can run code on the affected Windows machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Windows | vendor | – | – |
Unknown from the sources.
Apply the Microsoft Windows security update for CVE-2018-8414 per vendor instructions (CISA KEV required action); the specific KB number is not in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.
This page as .md · .json · in your agent: get_signal("CVE-2018-8414")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.