Microsoft Xml Core Services vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Xml Core Services: 2 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:xml_core_services

CVE-2017-0022 Medium · 6.5 KEV High · 53 CWE-119 Mar 16, 2017

Microsoft XML Core Services Information Disclosure Vulnerability

Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site, aka "Microsoft XML Information Disclosure Vulnerability."

CVE-2012-1889 High · 8.8 KEV Urgent · 86 Public exploit CWE-787 Jun 13, 2012

Microsoft XML Core Services Memory Corruption Vulnerability

Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.