All CVE records

CVE-2017-0022 — Microsoft XML Core Services Information Disclosure Vulnerability

CISA KEV listed Added May 24, 2022 Remediate by June 14, 2022

Description

Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2017-0022

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer