Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2017-0022

Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site, aka "Microsoft XML Information Disclosure Vulnerability."

CVSS 6.5 · MediumBuzz score 55.0KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 55.0

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 22.0 · diversity 8.0 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
22.0
8 evidence mentions in the snapshot
Diversity score
8.0
3 sources across 1 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
8 source links · newest first
  • The Top Vulnerabilities Exploited by CybercriminalsSecurityWeek

    Cybercriminals are shifting their focus from Adobe to Microsoft consumer products, and are now concentrating more on targeted attacks than on web-based exploit kits.

    newswww.securityweek.comMar 27, 2018, 3:13 PM
  • Stegano Exploit Kit now uses the Diffie-Hellman AlgorithmSecurity Affairs

    The Stegano exploit kit, also known as Astrum, continues to evolve, recently its authors adopted the Diffie-Hellman algorithm to hinder analysis. The Stegano exploit kit made was associated in the past with a massive AdGholas malvertising campaign that delivered malware, mostly Gozi and RAMNIT trojans. Experts at TrendMicro also observed the exploit kit in the Seamless malvertising campaign. “Astrum’s […]

    newssecurityaffairs.comMay 20, 2017, 7:31 PM
  • Stegano Exploit Kit Adopts the Diffie-Hellman AlgorithmSecurityWeek

    After receiving multiple updates, the Stegano exploit kit (EK) recently adopted the Diffie-Hellman algorithm to hinder analysis, Trend Micro security researchers warn.

    newswww.securityweek.comMay 19, 2017, 11:59 AM
  • Security Affairs newsletter Round 105 – News of the weekSecurity Affairs

    A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. First of all, let me inform you that at the #infosec16 SecurityAffairs was awarded as The Best European Personal Security Blog http://securityaffairs.co/wordpress/48202/breaking-news/securityaffairs-best-european-personal-security-blog.html · Arbor Networks linked a new Acronym Malware to the Potao Express campaign · Security Affairs newsletter […]

    newssecurityaffairs.comMar 26, 2017, 10:37 AM
  • CVE-2017-0022 Windows Zero-Day flaw used by AdGholas hackers and it was included in Neutrino EKSecurity Affairs

    The recently patched CVE-2017-0022 Windows Zero-Day vulnerability has been exploited by threat actors behind the AdGholas malvertising campaign and Neutrino EK since July 2016. Microsoft has fixed several security flaws with the March 2017 Patch Tuesday updates. According to security experts at Trend Micro, the list of fixed vulnerabilities includes three flaws that had been exploited […]

    newssecurityaffairs.comMar 25, 2017, 1:23 PM
  • Windows Zero-Day Exploited by AdGholas, Neutrino EKSecurityWeek

    One of the Windows zero-day vulnerabilities patched by Microsoft this month has been exploited by cybercriminals since last summer, Trend Micro said on Friday.

    newswww.securityweek.comMar 24, 2017, 5:09 PM
  • Microsoft Patches Many Exploited, Disclosed FlawsSecurityWeek

    Microsoft has released a total of 18 security bulletins to address tens of vulnerabilities, including more than a dozen that have already been publicly disclosed or exploited in attacks.

    newswww.securityweek.comMar 14, 2017, 7:01 PM
  • Browser-based fingerprinting: implications and mitigationsMalwarebytes Labs

    Update (04/12/2017): The INRIA has a tool to fingerprint browser extensions and detect other other browser leaks.Update (03/17/2017): Microsoft patched CVE-2017-0022, reported by…

    newswww.malwarebytes.comAug 28, 2016, 5:00 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence