PULSE
FEED
ransomqilin reclama a Via Credit Union · US · Financial Servicesransomn0n reclama a Company #75 · US · Not Foundransomn0n reclama a Company #74 · US · Not Foundransomn0n reclama a Evolution Spine / All Labs · Healthcareransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a Via Credit Union · US · Financial Servicesransomn0n reclama a Company #75 · US · Not Foundransomn0n reclama a Company #74 · US · Not Foundransomn0n reclama a Evolution Spine / All Labs · Healthcareransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defense
← All CVEs
CVE Watch—

CVE-2018-8414

Microsoft Windows Shell Remote Code Execution Vulnerability

CVSS

—

No CVSS

EPSS

72.9%

p99

KEV

YES

Mar 25, 2022

Exploit Today

80

0-100

Published: — · Last modified: —

EPSS · 30d
72.9%EPSS · 30 days74.0%
2026-09-172026-10-15
KEV catalog record

Product

Microsoft / Windows

Vulnerability

Microsoft Windows Shell Remote Code Execution Vulnerability

Added to KEV

Mar 25, 2022

Remediate by

Apr 15, 2022

Known ransomware use

No

Summary description

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-8414

Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-969518.8 HIG
74.0%
KEV—72Microsoft Windows Command Injection Vulnerability8h
CVE-2026-858807.8 HIG
89.3%
KEV—77Microsoft Windows Heap-Based Buffer Overflow Vulnerability22d
CVE-2026-819637.8 HIG
31.9%
KEV—60Microsoft Windows Link Following Vulnerability37d
CVE-2026-322024.3 MED
92.0%
KEV—78Microsoft Windows Protection Mechanism Failure Vulnerability63d
CVE-2026-208055.5 MED
94.4%
KEV—78Microsoft Windows Information Disclosure Vulnerability78d
CVE-2025-622217.8 HIG
84.4%
KEV—75Microsoft Windows Use After Free Vulnerability21d