CVE-2017-0022
Microsoft XML Core Services Information Disclosure Vulnerability
Published Mar 16, 2017 · updated Jun 16, 2026 · microsoft xml core services
Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site, aka "Microsoft XML Information Disclosure Vulnerability."
Timeline
Detection, updates, and resolution for this record.
Mar 16, 2017 · Catalog
Detected
Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site, aka "Microsoft XML Information Disclosure Vulnerability."
May 24, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jun 14, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site, aka "Microsoft XML Information Disclosure Vulnerability."
Required action
Apply updates per vendor instructions.
CISA due date Jun 14, 2022
Affected
- cpe microsoft/windows 8.1version unspecified
- cpe microsoft/windows server 2008r2
- cpe microsoft/windows server 2012version unspecified
- cpe microsoft/windows server 2012r2
- cpe microsoft/xml core services3.0
- vendor Microsoft XML Core Servicesversion unspecified
Sources
- CISA KEVCVE-2017-0022
Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site.
cisa.gov - CVE.orgCVE-2017-0022
Official CVE identifier
cve.org - FIRST EPSSCVE-2017-0022
30-day exploitation probability 18.1%
first.org - NIST NVDCVE-2017-0022
Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in memory, allowing attac
nvd.nist.gov