CISA known exploited vulnerability

CVE-2018-8174

Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

SOURCE FACT

Microsoft · Windows

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"

Required action

Apply updates per vendor instructions.

CISA notes

https://nvd.nist.gov/vuln/detail/CVE-2018-8174

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

CVE-2018-8174

Microsoft · Windows

Required action

CISA notes

Could this product be present?