CVE-2018-8256

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2018-8256

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8256.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2018-8256

Published

2018-11-14T01:29:00.253Z

Modified

2026-07-08T05:54:38.795665332Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execution Vulnerability." This affects Windows RT 8.1, PowerShell Core 6.0, Microsoft.PowerShell.Archive 1.2.2.0, Windows Server 2016, Windows Server 2012, Windows Server 2008 R2, Windows Server 2019, Windows 7, Windows Server 2012 R2, PowerShell Core 6.1, Windows 10 Servers, Windows 10, Windows 8.1.

Database specific

{
    "unresolved_ranges": [
        {
            "vendor_product": "microsoft:microsoft.powershell.archive",
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:a:microsoft:microsoft.powershell.archive:1.2.2.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "1.2.2.0"
                },
                {
                    "last_affected": "1.2.2.0"
                }
            ]
        },
        {
            "vendor_product": "microsoft:windows_10",
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
                "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
                "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
                "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
                "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "1607"
                },
                {
                    "last_affected": "1607"
                },
                {
                    "introduced": "1703"
                },
                {
                    "last_affected": "1703"
                },
                {
                    "introduced": "1709"
                },
                {
                    "last_affected": "1709"
                },
                {
                    "introduced": "1803"
                },
                {
                    "last_affected": "1803"
                },
                {
                    "introduced": "1809"
                },
                {
                    "last_affected": "1809"
                }
            ]
        },
        {
            "vendor_product": "microsoft:windows_server_2008",
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
                "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*"
            ],
            "extracted_events": [
                {
                    "introduced": "r2-sp1"
                },
                {
                    "last_affected": "r2-sp1"
                },
                {
                    "introduced": "r2-sp1"
                },
                {
                    "last_affected": "r2-sp1"
                }
            ]
        },
        {
            "vendor_product": "microsoft:windows_server_2012",
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "r2"
                },
                {
                    "last_affected": "r2"
                }
            ]
        },
        {
            "extracted_events": [
                {
                    "introduced": "1709"
                },
                {
                    "last_affected": "1709"
                },
                {
                    "introduced": "1803"
                },
                {
                    "last_affected": "1803"
                }
            ],
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*",
                "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*"
            ],
            "vendor_product": "microsoft:windows_server_2016"
        }
    ]
}

References

Affected packages

Git / github.com/powershell/powershell

Affected ranges

Type

GIT

Repo

https://github.com/powershell/powershell

Events

Introduced

2f818615bed15141c062dd185f659ed110d9c6ba

Last affected

855d2b9d75bd5b92e1929676d3ec6e13ef3e6838

Database specific

{
    "source": "CPE_STRING",
    "cpe": [
        "cpe:2.3:a:microsoft:powershell_core:6.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:microsoft:powershell_core:6.1:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "6.0"
        },
        {
            "last_affected": "6.0"
        },
        {
            "introduced": "6.1"
        },
        {
            "last_affected": "6.1"
        }
    ]
}

Affected versions

6.*

6.0

6.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8256.json"