CVE-2018-8115

CVSS 3.0: 8.6 high
EPSS: 35%p98
Published: May 2, 2018 · May 2, 2018
Modified: Jun 17, 2026

Analyze CVE-2018-8115 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists when the Windows Host Compute Service Shim (hcsshim) library fails to properly validate input while importing a container image, aka "Windows Host Compute Service Shim Remote Code Execution Vulnerability." This affects Windows Host Compute.

Vendors: microsoft

Products: windows host compute service shim

Weakness: CWE-20

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (34.6%)

In the news

3 stories

Microsoft Patch Tuesday

Cisco TalosMay 8, 19:02 UTC · May 8, 2018VulnerabilityCVE-2018-4944 CVE-2018-8174 CVE-2018-0959+613 · 1 read

Microsoft Issues Emergency Patch For Critical Flaw In Windows Containers

The Hacker NewsMay 3, 09:44 UTC · May 3, 2018VulnerabilityCVE-2018-81153 · 1 read

Microsoft addressed critical flaw in Windows Host Compute Service Shim library

Security AffairsMay 3, 06:22 UTC · May 3, 2018Exploit / PoCCVE-2018-81152