The vulnerability in the set of Microsoft XML Core Services on the Windows operating system allows a perpetrator to escalate their privileges.

The vulnerability of the Microsoft XML Core Services on the Windows operating system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

CVE-2026-50359

Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally...

CVE-2026-50359 Microsoft XML Core Services Elevation of Privilege Vulnerability

...

CVE-2019-0756

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'...

CVE-2017-0022

Microsoft XML Core Services MSXML in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in memory, allowing attackers to test for...

VulnCheck KEV: CVE-2012-1889

Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution...