CVE-2018-0883

N/A

Published: March 14, 2018 at 05:00 PM UTC

Updated: June 17, 2026 at 01:31 AM UTC

9 products affected across 1 vendorWindows Server 2016Windows Server 2012Windows Server 2008

Using Windows Shell by Microsoft Corporation?

Get instant alerts when new vulnerabilities affect Windows Shell - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 15%

Description

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how file copy destinations are validated, aka "Windows Shell Remote Code Execution Vulnerability".

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Windows 10 · Microsoft

95%

1511 1607 1703

Windows 7 · Microsoft

95%

sp1

Windows 8-1 · Microsoft

95%

All versions

Windows Rt 8-1 · Microsoft

95%

All versions

Windows Server · Microsoft

95%

1709

Windows Server 2008 · Microsoft

95%

r2 sp1sp2

Windows Server 2012 · Microsoft

95%

Windows Server 2016 · Microsoft

95%

All versions

Windows · Microsoft

60%

Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016 and Windows Server, version 1709