CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-03-17
Microsoft XML Core Services (MSXML) Information Disclosure and File Detection Vulnerability (CVE-2017-0022)
[Affected Scope] Microsoft XML Core Services (MSXML) running on Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] Attackers can determine the existence of specific files on the local disk and gather system intelligence via crafted malicious websites
[Mitigation] Apply the official Microsoft cumulative security updates and restrict MSXML ActiveX control execution via registry hardening