CVE-2018-8495

7.5 highEPSS 51%

A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 51% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2018-10-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10
microsoft:windows_server_2016

References

http://www.securityfocus.com/bid/105461
https://leucosite.com/Microsoft-Edge-RCE/
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8495
http://www.securityfocus.com/bid/105461
https://leucosite.com/Microsoft-Edge-RCE/

Check your stack JSON