What is the CVSS score of CVE-2018-8414?

CVE-2018-8414 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 74.0%.

Is CVE-2018-8414 being actively exploited?

Yes, CVE-2018-8414 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active in-the-wild exploitation. Immediate patching is required.

Is there a patch available for CVE-2018-8414?

Yes, a patch is available for CVE-2018-8414. Update the affected software to the latest version immediately.

Windows 10 1703 CVE-2018-8414

HIGH

Improper Input Validation (CWE-20)

2018-08-15 secure@microsoft.com

RCE Microsoft Windows 10 1703 Windows Server 1709 Windows 10 1709 Windows 10 1803 Windows Server 1803

8.8

CVSS 3.1 · NVD

View

Vulnerability Assessment

Weakness	CWE CWE-20 OWASP Top 10:2025 A05:2025 - Injection ASVS 5.0 V2 - Validation and Business Logic Input validation, allowlisting
Impact	CVSS score of 8.8 (HIGH). Attack characteristics: network attack vector, low complexity, no privileges required, user interaction required.
Exploit ScenarioDerived	This vulnerability can be exploited remotely over the network. Successful exploitation could compromise the high-severity affected system.

This Week Schedule remediation this week. Why: In CISA KEV with patch available.

Exploited in the wild (CISA KEV) Patch available 74.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAI

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers,. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

This vulnerability is classified under CWE-20. A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10. Affected products include: Microsoft Windows 10 1703, Microsoft Windows 10 1709, Microsoft Windows 10 1803, Microsoft Windows Server 1709, Microsoft Windows Server 1803.

Know when Windows 10 1703 gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Added to CISA KEV

Jul 14, 2026 - 04:22 CISA

CVE Published

Aug 15, 2018 - 17:29 nvd

HIGH 8.8

DescriptionNVD

Threat Intelligence Overview

EPSS Score

74.0%

Top 1% exploitable

Data Quality

2 sources

Confidence: Low

NVD

CVE.org

CISA KEV

EPSS

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity HIGH

CISA KEV Yes

Public POC No

EPSS 74.0%

Patch available Yes

Active threat Yes

Deciding rule

In CISA KEV with patch available

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Out-of-Cycle

Exploitation· derived

Active

System Exposure· derived

Open

Automatable· derived

Human Impact· derived

High

Priority Score

168

Low Medium High Critical

KEV: +50

EPSS: +74

CVSS: +44

PoC: 0

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Remote Code Execution CRITICAL

Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.

Affected Products (CPE)NVD

cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x64:*

cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x86:*

cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x64:*

cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x86:*

cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:*

cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x86:*

cpe:2.3:o:microsoft:windows_server_1709:-:*:*:*:*:*:x64:*

cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:x64:*

More in Windows 10 1703

View all

CVE-2018-8174 HIGH Act Now POC

7.5 May 09

The Windows VBScript engine contains a remote code execution vulnerability in object handling that allows full system co

CVE-2018-8453 HIGH Act Now POC

7.8 Oct 10

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

CVE-2019-1069 HIGH Act Now POC

7.8 Jun 12

An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations.

CVE-2019-1130 HIGH Act Now

7.8 Jul 15

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

CVE-2019-0841 HIGH Act Now POC

7.8 Apr 09

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

CVE-2018-8440 HIGH Act Now POC

7.8 Sep 13

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (A

CVE-2018-0824 HIGH This Week POC

8.8 May 09

A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized

CVE-2019-0543 HIGH This Week POC

7.8 Jan 08

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft W

CVE-2019-0903 HIGH This Week

8.8 May 16

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects

CVE-2019-1315 HIGH This Week

7.8 Oct 10

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka '

CVE-2019-1253 HIGH This Week POC

7.8 Sep 11

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To e

CVE-2019-1215 HIGH This Week POC

7.8 Sep 11

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Win

Same weakness CWE-20 – Improper Input Validation

View all

CVE-2021-44228 CRITICAL POC

10.0

CVE-2024-3400 CRITICAL POC

10.0

CVE-2022-47966 CRITICAL POC

9.8

CVE-2023-22515 CRITICAL POC

9.8

CVE-2009-0927 HIGH POC

8.8

CVE-2017-9791 CRITICAL POC

9.8

CVE-2017-15944 CRITICAL POC

9.8

CVE-2019-0604 CRITICAL POC

9.8

Same technique RCE

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2023-3519 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2016-4117 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

References

Advisories & patches

PATCH https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8414 REF http://www.securityfocus.com/bid/105016 REF http://www.securitytracker.com/id/1041458 REF https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8414

Search Externally

GitHub PoC

Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC

Back