PULSE
ESEN
FEED
ransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomeverstake reclama a ne*****h.comransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomeverstake reclama a ne*****h.com
← Todos os CVEs
CVE Watch—

CVE-2017-0022

Microsoft XML Core Services Information Disclosure Vulnerability

CVSS

—

Sem CVSS

EPSS

18.1%

p97

KEV

SIM

24 de mai. de 2022

Exploit Today

79

0-100

Publicado: — · Última mod.: —

EPSS · 30d
18.1%EPSS · 30 dias18.1%
2026-10-082026-11-05
Ficha do catálogo KEV

Produto

Microsoft / XML Core Services

Vulnerabilidade

Microsoft XML Core Services Information Disclosure Vulnerability

Adicionado ao KEV

24 de mai. de 2022

Corrigir até

14 de jun. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2017-0022

CVEs relacionados
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2012-1889—
99.7%
KEV—80Microsoft XML Core Services Memory Corruption Vulnerability—