Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2018-8415: PowerShell can run hidden code on many Windows versions
CVE-2018-8415 · published 7 years ago
Summary
The PowerShell command tool in Windows and its open‑source version can be tricked into running code that does not get recorded in logs. This means an attacker could carry out actions on the system without detection. Apply the latest security updates from Microsoft and restart affected machines to protect against this risk.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | powershell_core |
6.0 6.1 cpe:2.3:a:microsoft:powershell_core:6.0:*:*:*:*:*:*:* |
| microsoft | windows_10 |
1607 1703 1709 1803 1809 cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* |
| microsoft | windows_7 |
All versions
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* |
| microsoft | windows_8.1 |
All versions
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* |
| microsoft | windows_rt_8.1 |
All versions
cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:* |
| microsoft | windows_server_2008 |
r2 cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:* |
| microsoft | windows_server_2012 |
r2 cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* |
| microsoft | windows_server_2016 |
1709 1803 cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* |
| microsoft | windows_server_2019 |
All versions
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* |
Original advisory text
A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vulnerability." This affects Windows 7, PowerShell Core 6.1...
A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vulnerability." This affects Windows 7, PowerShell Core 6.1, Windows Server 2012 R2, Windows RT 8.1, PowerShell Core 6.0, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8415 Patch Vendor Advisory
- http://www.securityfocus.com/bid/105792 Third Party Advisory VDB Entry
- http://www.securitytracker.com/id/1042108 Third Party Advisory VDB Entry
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-94Code Injection
Timeline
Published14 Nov 2018
Updated4 Nov 2026
First seen23 Sep 2026
Track software like this
Free during beta