CVE-2016-0147

High

Published: 12/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, posing a significant security threat.

Risk Assessment

Exploitation of this vulnerability could lead to system compromise, risking data loss and integrity breaches.

Recommendation

It is recommended to update Microsoft XML Core Services to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Microsoft XML Core Services 3.0

CVE-2026-50359High
A use-after-free vulnerability in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally.

Original NVD description (English source)

Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, aka "MSXML 3.0 Remote Code Execution Vulnerability."