CVE-2018-8420

—

CVSS 3.0

8.8 high

EPSS

49%p99

Published

Sep 13, 2018 (Sep 13, 2018)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

Vendors: microsoft
Products: windows 10, windows 7, windows 8.1, windows server
Weakness: CWE-611
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (48.9%)

In the news1 stories

Microsoft Patch Tuesday

Cisco TalosSep 11, 18:56 UTC · Sep 11, 2018Vulnerability CVE-2018-0965 CVE-2018-8367 CVE-2018-8420+26 CVEs