CVE-2017-0022

An information disclosure flaw in Microsoft XML Core Services allowed attackers to test for files on disk via a crafted website.

This vulnerability in Microsoft XML Core Services (MSXML) allowed attackers to test for files on disk by exploiting improper memory handling. For DIB organizations, this means attackers could potentially map out sensitive file structures, aiding further attacks like ransomware or data exfiltration. Organizations must ensure MSXML is patched and monitor for exploitation attempts.

Shame score — While not a zero-day or RCE, this is a known, actively exploited vulnerability (KEV) that attackers used to gather intelligence, representing a moderate embarrassment due to its widespread exploitation.