CVE-2018-8414

Windows Shell fails to properly validate file paths, allowing an attacker to execute arbitrary code remotely on affected Windows 10 systems. This is a critical flaw because it gives attackers direct control over the compromised computer.

The vulnerability stems from improper input validation (CWE-20) in Windows Shell's file path handling, enabling remote code execution. An attacker can craft malicious file paths that bypass validation checks, leading to arbitrary code execution with the privileges of the affected process. This requires user interaction or network exposure to trigger the flaw.