CVE-2018-1004

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Internet Explorer 9, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
Microsoft	Windows 7	32-bit Systems Service Pack 1; x64-based Systems Service Pack 1
Microsoft	Windows Server 2012 R2	(Server Core installation)
Microsoft	Internet Explorer 9	Windows Server 2008 for 32-bit Systems Service Pack 2; Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft	Windows RT 8.1	Windows RT 8.1
Microsoft	Windows Server 2012	(Server Core installation)
Microsoft	Windows 8.1	32-bit systems; x64-based systems
Microsoft	Windows Server 2016	(Server Core installation)
Microsoft	Windows Server 2008 R2	Itanium-Based Systems Service Pack 1; x64-based Systems Service Pack 1; x64-based Systems Service Pack 1 (Server Core installation)
Microsoft	Windows 10	32-bit Systems; Version 1511 for 32-bit Systems; Version 1511 for x64-based Systems; Version 1607 for 32-bit Systems; Version 1607 for x64-based Systems; Version 1703 for 32-bit Systems; Version 1703 for x64-based Systems; Version 1709 for 32-bit Systems; Version 1709 for x64-based Systems; x64-based Systems

References

http://www.securityfocus.com/bid/103657Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040655Third Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1004Patch, Vendor Advisory
http://www.securityfocus.com/bid/103657Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040655Third Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1004Patch, Vendor Advisory

Timeline

Published: Apr 12, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-100488.8iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel.CVE-2018-100494.8iScripts eSwap v2.4 has XSS via the "registration_settings.php" txtDate parameter in the Admin Panel.CVE-2018-10055.4An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t CVE-2018-100507.2iScripts eSwap v2.4 has SQL injection via the "registration_settings.php" ddlFree parameter in the Admin Panel.CVE-2018-100515.4iScripts SupportDesk v4.3 has XSS via the staff/inteligentsearchresult.php txtinteligentsearch parameter.CVE-2018-100524.8iScripts SupportDesk v4.3 has XSS via the admin/inteligentsearchresult.php txtinteligentsearch parameter.CVE-2018-100548.8H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary J CVE-2018-100558.1Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or CVE-2018-100576.5The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write the miner configuratio CVE-2018-100588.8The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to execute arbitrary code due t CVE-2018-100595.4Cacti before 1.1.37 has XSS because the get_current_page function in lib/functions.php relies on $_SERVER['PHP_SELF'] instead of $_SERVER['S CVE-2018-100605.4Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitize_uri function in lib/fu