HIGHCVSS v3.1 8.8Actively exploited · CISA KEV since 2022-03-25Vulnerability
CVE-2018-8414
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.
Properties
- Vulnerability name
- Microsoft Windows Shell Remote Code Execution Vulnerability
- Epss score
- 0.72621
- Last seen
- 2026-10-19T12:00:27+00:00
- Due date
- 2022-04-15
- Exploited euvd since
- 2022-03-25T00:00:00+00:00
- Source url
- https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
- Date added
- 2022-03-25
- Score
- 8.8
- Euvd base score version
- 3.1
- Euvd vendor
- Microsoft
- In Signal since
- initial import (Sep 2026)
- Euvd base score
- 8.8
- Vendor project
- Microsoft
- Content hash
- c67442d3dc31fdd8b4987d93fc0c2e876c4537933738fca047e57fdbe64e26bb
- Published at
- 2018-08-15T17:29:10.393
- Euvd updated
- 2025-10-21T23:45:48+00:00
- Last modified
- 2026-06-17T02:04:48.927
- Euvd epss pct
- 72.91
- Epss percentile
- 0.99441
- Licence
- FIRST EPSS: free to use; attribution requested in publications or products (FAQ)
Related Entities (11)
AFFECTS_PRODUCT (8)
DESCRIBES (1)
HAS_WEAKNESS (1)
INVOLVES (1)
Explore deeper with Ninja Signal's threat intelligence graph