Security feed

24 October 2026

Unrated

Microsoft XML Core Services Information Disclosure Vulnerability

Type: advisorySource: CISA Known Exploited VulnerabilitiesKnown exploited24 Oct 2026, 21:20 UTC

Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site. CISA required action: Apply updates per vendor instructions.

Products: XML Core ServicesCVEs: CVE-2017-0022

Unrated

Microsoft XML Core Services Memory Corruption Vulnerability

Type: advisorySource: CISA Known Exploited VulnerabilitiesKnown exploited24 Oct 2026, 21:19 UTC

Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution. CISA required action: Apply updates per vendor instructions.

Products: XML Core ServicesCVEs: CVE-2012-1889