Skip to content
COOEY

FAIL › dossier

XML Core Services

PRODUCT

· dossier confidence 90%

XML Core Services is a Microsoft XML processing component with a documented history of high-severity vulnerabilities that remained actively exploitable years after their initial discovery.

Failure events
2
Zero-days
0
RCEs
1
On KEV
2
Critical
0
Worst shame
65
PROFILE
CategorysoftwareWhat they doXML Core Services is a Microsoft product used for parsing and processing XML data.
SECURITY POSTURE

The product has a history of critical vulnerabilities that remain exploitable years after discovery, indicating a lack of timely patching or architectural hardening.

Notable failures
  • CVE-2012-1889 RCE
  • CVE-2017-0022 information disclosure
Patterns: long-lived unpatched critical vulnerabilities
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2022-06-08 CVE-2012-1889 high A decade-old Microsoft XML Core Services vulnerability is actively exploited, enabling remote code execution.
2022-05-24 CVE-2017-0022 high An information disclosure flaw in Microsoft XML Core Services allowed attackers to test for files on disk via a crafted website.
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-07 03:54:17.970838+00:00