coldbraid

CVE-2012-1889 Microsoft XML Core Services

Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.

CVSS
not scored

CWE-119

On CISA’s exploited list

Microsoft XML Core Services Memory Corruption Vulnerability

Added
2022-06-08
Federal patch deadline
2022-06-22
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)