XML Core Services vulnerabilities

2 known vulnerabilities in XML Core Services from Microsoft. 1 is rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 6.5 Medium severity

  Microsoft XML Core Services Information Disclosure Exploited

  CVE-2017-0022Mar 17, 2017MicrosoftEPSS 18.1%

  Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in me

• 8.8 High severity

  Microsoft XML Core Services Memory Corruption Exploited

  CVE-2012-1889Jun 13, 2012MicrosoftEPSS 83.5%

  Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.