CVE-2018-8373

A remote code execution vulnerability in the Microsoft Scripting Engine of Internet Explorer allowed attackers to execute arbitrary code on affected systems.

This vulnerability in Internet Explorer's Scripting Engine enabled remote code execution, allowing attackers to compromise systems without user interaction. DIB organizations must ensure all legacy and unsupported software like Internet Explorer is patched or removed, as it represents a critical compliance gap under NIST 800-171 for maintaining secure configurations and patching known vulnerabilities.

Shame score — Microsoft shipped a critical RCE vulnerability in a widely deployed, long-supported product without timely patching, and the product itself was end-of-life and unsupported, demonstrating severe negligence in vulnerability management and product lifecycle support.