CVE

CVE-2017-0022

Microsoft XML Core Services Information Disclosure Vulnerability

Microsoft · XML Core Services

Date added (CISA)

2022-05-24

Remediation due

2022-06-14

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site.