Windows VBScript Engine Remote Code Execution Vulnerability

🗓️ 08 May 2018 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 138 Views

Remote Code Execution in Windows VBScript Engin

Reporter	Title	Published	Views	Family All 110
0day.today	Microsoft Internet Explorer 11 #InternetExplorer #IE (#Windows7 x64/x86) - vbscript Code Execution E	24 May 201800:00	–	zdt
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	23 May 201910:28	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	1 Jun 201822:12	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	30 May 201803:12	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	22 May 201821:50	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	10 Jul 201819:31	–	githubexploit
Gitee	Exploit for CVE-2014-4878	28 Mar 202000:48	–	gitee
ATTACKERKB	CVE-2018-8174	9 May 201800:00	–	attackerkb
Information Security Automation	September 2023: VM courses, Bahasa Indonesia, Russian Podcasts, Goodbye Tinkoff, MS Patch Tuesday, Qualys TOP 20, Linux, Forrester, GigaOm, R-Vision VM	30 Sep 202319:31	–	avleonov
BDU FSTEC	The vulnerability of VBScript script handlers in Windows operating systems allows attackers to execute arbitrary code.	22 Jun 201800:00	–	bdu_fstec

Vulners

Node

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_server_2016

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

OR

microsoft windows_10_version_1709_for_x64-based_systems

OR

microsoft windows_10_version_1709_for_32-bit_systems

OR

microsoft windows_server,_version_1803_(server_core_installation)

OR

microsoft windows_10_version_1803_for_x64-based_systems

OR

microsoft windows_10_version_1803_for_32-bit_systems

OR

microsoft windows_10_version_1703_for_x64-based_systems

OR

microsoft windows_10_version_1703_for_32-bit_systems

OR

microsoft windows_server,_version_1709_(server_core_installation)

09 Aug 2018 07:00Current

8.4High risk

Vulners AI Score8.4

CVSS 3.17.5

CVSS 27.6

CVSS 37.5

EPSS0.87814

SSVC

vulnerability memory corruption remote execution user rights internet explorer activex control security update compromised websites