Xml Core Services (Microsoft) - vulnerabilities (CVEs)
19 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2017-03-17. Vendor: Microsoft.
CVEs of Xml Core Services
- CVE-2017-0022 - CVSS 6.5 (medium), 2017-03-17: Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1;…
- CVE-2016-0147 - CVSS 8.8 (high), 2016-04-12: Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, aka "MSXML 3.0 Remote Code Execution Vulnerability."
- CVE-2015-2471 - CVSS 4.3 (medium), 2015-08-15: Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by…
- CVE-2015-2440 - CVSS 4.3 (medium), 2015-08-15: Microsoft XML Core Services 3.0, 5.0, and 6.0 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "MSXML Information…
- CVE-2015-2434 - CVSS 4.3 (medium), 2015-08-15: Microsoft XML Core Services 3.0 and 5.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing…
- CVE-2015-1646 - CVSS 4.3 (medium), 2015-04-14: Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka…
- CVE-2014-1816 - CVSS 4.3 (medium), 2014-06-11: Microsoft XML Core Services (aka MSXML) 3.0 and 6.0 does not properly restrict the information transmitted by Internet Explorer during a download action,…
- CVE-2013-0007 - CVSS 9.3 (critical), 2013-01-09: Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a…
- CVE-2013-0006 - CVSS 8.8 (high), 2013-01-09: Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a…
- CVE-2012-1889 - CVSS 8.8 (high), 2012-06-13: Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a…
- CVE-2010-2561 - CVSS 9.3 (critical), 2010-08-11: Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code or cause a denial…
- CVE-2009-0419 - CVSS 5 (medium), 2009-02-04: Microsoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and 7, and other products, does not properly restrict access…
- CVE-2008-4033 - CVSS 4.3 (medium), 2008-11-12: Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, and other products,…
- CVE-2007-2223 - CVSS 9.3 (critical), 2007-08-14: Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2)…
- CVE-2007-0099 - CVSS 9.3 (critical), 2007-01-08: Race condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet Explorer 6 and other applications, allows remote attackers to…
- CVE-2006-5745 - CVSS 7.6 (high), 2006-11-06: Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when…
- CVE-2006-4686 - CVSS 7.5 (high), 2006-10-10: Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0…
- CVE-2006-4685 - CVSS 2.6 (low), 2006-10-10: The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which…
- CVE-2002-0057 - CVSS 5 (medium), 2002-03-08: XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read…
