CVE-2018-8174—Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

PUBLISHEDvulnerability record
2022-02-15 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2018-8174
Project:
Microsoft
Product:
Windows
Date Added:
2022-02-15
Due Date:
2022-08-15
Last Updated:
June 21, 2025

Vulnerability Name

Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

Description

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

  • https://nvd.nist.gov/vuln/detail/CVE-2018-8174

Related Weaknesses

browse all CVEs