CVE-2018-8174 — Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

Known ransomware use CISA KEV listed Added February 15, 2022 Remediate by August 15, 2022

Description

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-8174

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer