CVE-2018-8174: Microsoft Windows 7 vulnerability

1. In CISA KEVCISA KEV catalogue15 Feb 2022
2. Exploited (reported): not seen
3. Scanning observed: not seen
4. Proof of concept public: not seen
5. Not established: not seen

DescriptionCVE.org

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

• Microsoft · Windows 732-bit Systems Service Pack 1; x64-based Systems Service Pack 1
• Microsoft · Windows Server 2012 R2(Server Core installation)
• Microsoft · Windows RT 8.1Windows RT 8.1
• Microsoft · Windows Server 200832-bit Systems Service Pack 2; 32-bit Systems Service Pack 2 (Server Core installation); Itanium-Based Systems Service Pack 2; x64-based Systems Service Pack 2; x64-based Systems Service Pack 2 (Server Core installation)
• Microsoft · Windows Server 2012(Server Core installation)
• Microsoft · Windows 8.132-bit systems; x64-based systems
• Microsoft · Windows Server 2016(Server Core installation)
• Microsoft · Windows Server 2008 R2Itanium-Based Systems Service Pack 1; x64-based Systems Service Pack 1; x64-based Systems Service Pack 1 (Server Core installation)
• Microsoft · Windows 1032-bit Systems; Version 1607 for 32-bit Systems; Version 1607 for x64-based Systems; Version 1703 for 32-bit Systems; Version 1703 for x64-based Systems; Version 1709 for 32-bit Systems and 4 more
• Microsoft · Windows 10 Serversversion 1709 (Server Core Installation); version 1803 (Server Core Installation)

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.

CISA KEV

Listed since 15 Feb 2022 · known ransomware use · catalogue entry

Public check

No public nuclei template

Weakness

Out-of-bounds Write · Memory Corruption

Vendor

Microsoft

Published

May 2018

Band

Exploited in the wild, May 2018

1. 5 Nov
   CISA’s KEV entry now notes known ransomware use CISA
2. 15 Feb 2022
   CISA added it to the KEV catalogue CISA

• NVD entrynvd.nist.gov
• CISA KEV cataloguecisa.gov
• CVE recordcve.org
• Weakness CWE-787cwe.mitre.org
• Exploitexploit-db.com
• blog.0patch.com/2018/05/a-single-instruction-micropatch-for.htmlblog.0patch.com
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2portal.msrc.microsoft.com
• securityfocus.com/bid/103998securityfocus.com