Microsoft XML Core Services Memory Corruption Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 08/06/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| xml core services | = 3.0= 4.0= 5.0= 6.0 |
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free