CVE-2018-8115

A remote code execution vulnerability exists when the Windows Host Compute Service Shim (hcsshim) library fails to properly validate input while importing a container image, aka "Windows Host Compute Service Shim Remote Code Execution Vulnerability." This affects Windows Host Compute.

Score

CVSS 3.0 8.6 High

Status

Modified - secure@microsoft.com

Published

2018-05-02

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Windows Host Compute (Microsoft)
• Windows Host Compute Service Shim (Microsoft)

References

• http://www.securityfocus.com/bid/104061
• http://www.securitytracker.com/id/1040842
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8115