CVE-2012-1889

No fix known ExploitedEPSS 84%CVSS 8.8

Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Published 2012-06-13 · In CISA KEV since 2022-06-08 · CVE record · OSV

Products: microsoft xml_core_services