CVE-2008-1435: Microsoft Windows-Nt

High severity, CVSS 9.3. EPSS: 28.6% chance of exploitation in the next 30 days.

Windows Explorer in Microsoft Windows Vista up to SP1, and Server 2008, allows user-assisted remote attackers to execute arbitrary code via crafted saved-search (.search-ms) files that are not properly handled when saving, aka "Windows Saved Search Vulnerability."

Affected products

• Microsoft Windows-Nt: version 2008 only
• Microsoft Windows Vista: any version

Published 2008-07-08. Last modified 2026-06-16.