CVE-2018-8174CISA KEVEPSS p99.8%

CVE-2018-8174Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

Microsoft / Windows

Description

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"

Scoring

CVSS 7.5 ()
VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS88.33% probability of exploitation · percentile 99.8% · 2026-09-30T12:00:21Z
Last modified2026-08-13

CISA KEV entry

Added to KEV: 2022-02-15

(incoming)1

TypeTargetConfidenceTier
KEVEntryMicrosoft Windows VBScript Engine Out-of-Bounds Write Vulnerabilitykev-cve-2018-81740%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Microsoft Windows Scripting Engine Memory Corruption Vulnerability
CVE
Microsoft Scripting Engine Memory Corruption Vulnerability
CVE
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CVE
Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability
CVE
Microsoft Windows Kernel Privilege Escalation Vulnerability
CVE
Microsoft Windows Shell Remote Code Execution Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.