CVE-2018-8327 Code injection in PowerShell Editor
Remote code execution in PowerShell Editor Services allows attackers to execute arbitrary code, impacting developers using the extension.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-8327?
CVE-2018-8327 is a critical code injection vulnerability in Microsoft PowerShell Editor, published on 11 Jul 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code Execution Vulnerability." This affects PowerShell Editor, PowerShell Extension.
Which versions are affected by CVE-2018-8327?
It affects 2 products.
Products include Microsoft Powershell, Microsoft Powershell Editor Services.
How do I fix CVE-2018-8327?
No fix has been published for CVE-2018-8327 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2018-8327 being exploited?
There is no known exploitation of CVE-2018-8327 in the wild and no public exploit code.
Other vulnerabilities in Microsoft PowerShell Editor
- CVE-2026-96251 Microsoft PowerShell Remote Code Execution Vulnerability
- CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
- CVE-2022-41076 PowerShell Remote Code Execution Vulnerability
- CVE-2026-50523 Microsoft PowerShell Remote Code Execution Vulnerability
- CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
Sources
Also known as GHSA-47pm-99w9-6mx8.