CVE-2017-0022 Microsoft XML Core Services
Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site.
- CVSS
- not scored
On CISA’s exploited list
Microsoft XML Core Services Information Disclosure Vulnerability
- Added
- 2022-05-24
- Federal patch deadline
- 2022-06-14
- Ransomware use
- not known