CVE-2018-8495

A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*

History

21 Nov 2024, 04:13

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/105461 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/105461 - Third Party Advisory, VDB Entry
References () https://leucosite.com/Microsoft-Edge-RCE/ - Exploit, Third Party Advisory () https://leucosite.com/Microsoft-Edge-RCE/ - Exploit, Third Party Advisory
References () https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8495 - Patch, Vendor Advisory () https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8495 - Patch, Vendor Advisory

Information

Published : 2018-10-10 13:29

Updated : 2024-11-21 04:13


NVD link : CVE-2018-8495

Mitre link : CVE-2018-8495

CVE.ORG link : CVE-2018-8495


JSON object : View

Products Affected

microsoft

  • windows_10
  • windows_server_2016
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')