← Global Threat Landscape

CVE-2018-8174

CWE-787

High

89.9

RPS

Description

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

Source: NVD

Signals

CVSS
7.5
High · v3.1
EPSS
88.33%
Probability of exploitation in the next 30 days (FIRST)
CISA KEV
In CISA KEV since Feb 2022
Fix commit
No known fix commit
Sources: MoreFixes, FreshFixes
Weakness
CWE-787
Published
9 May 2018
Last modified 13 Aug 2026

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2018-8174

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 8 Oct 2026, 05:16 UK time