Remote Code Execution Vulnerability in Microsoft XML Core Services
CVE-2016-0147

8.8HIGH

Key Information:

Vendor
Microsoft
Status
Xml Core Services
Vendor
CVE Published:
12 April 2016

Summary

Microsoft XML Core Services 3.0 contains a vulnerability that allows remote attackers to execute arbitrary code on affected systems through specially crafted web content. This can lead to unauthorized control of the system and potential data breaches. It is crucial for users to apply the necessary security updates to mitigate this risk.

References

http://www.securitytracker.com/id/1035523
vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

35% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.