References https://www.anquanke.com/post/id/166581 https://support.microsoft.com/zh-cn/topic/ms15-019-vbscript-%E8%84%9A%E6%9C%AC%E5%BC%95%E6%93%8E%E4%B8%AD%E7%9A%84%E6%BC%8F%E6%B4%9E%E5%8F%AF%E8%83%BD%E5%85%81%E8%AE%B8%E8%BF%9C%E7%A8%8B%E6%89%A7%E8%A1%8C%E4%BB%A3%E7%A0%81-2015-%E5%B9%B4-3-%E6%9C%88-10-%E6%97%A5-3599637c-0a26-7e63-69d1-8e916c50df03 https://www.seqrite.com/zh-CN/blog/cve-2018-8174-windows-vbscript-engine-remote-code-execution-vulnerability/ https://www.4hou.com/shop/posts/VQK5 https://itsc.nju.edu.cn/da/2d/c41947a514605/page.htm https://idocdown.com/app/articles/blogs/detail/7520 https://avd.aliyun.com/detail?id=AVD-2018-8174 https://nvd.nist.gov/vuln/detail/cve-2018-8174 https://www.anquanke.com/post/id/164493 https://www.cnblogs.com/tsimfeiwan/p/11990565.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8174 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-019 http://waido.github.io/2019/01/01/CVE-2018-8174%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0%E5%8F%8A%E5%86%85%E7%BD%91%E6%B8%97%E9%80%8F%E6%94%BB%E5%87%BB/
Related VulnerabilitiesWindows截图工具NTLM信息泄露漏洞(CVE-2026-33829)Gradio /static//windows/win.ini 文件读取漏洞 (CVE-2026-28414)Windows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)PoCCVE-2025-13315: Twonky Server 8.5.2 on Linux and Windows - Log File ExposureWindows PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)Windows 11 PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)Windows 11 RAiLaunchAdminProcess 管理员保护特权提升漏洞(CVE-2025-62522)Vite开发服务器Windows环境下文件泄露漏洞(CVE-2025-41246) VMware Tools for Windows授权不当漏洞Windows NTLMv2-SSP Hash信息泄露漏洞(CVE-2025-50154)(CVE-2025-26513)SAN Host Utilities for Windows 8.0前版本安装程序本地权限提升漏洞(CVE-2025-8088) WinRAR Windows版本路径遍历漏洞可导致任意代码执行PoCCVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code Execution