Cybersecurity Alerts

Microsoft XML Core Services Information Disclosure Vulnerability

Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-200

References

• https://nvd.nist.gov/vuln/detail/CVE-2017-0022