coldbraid

CVE-2018-8174 Microsoft Windows

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"

CVSS
not scored

CWE-787

On CISA’s exploited list

Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

Added
2022-02-15
Federal patch deadline
2022-08-15
Ransomware use
known

Actors known to use it (MITRE ATT&CK)