CVE-2017-0022

CVE-2017-0022 is an information disclosure vulnerability in Microsoft XML Core Services (MSXML) affecting numerous Windows operating systems, including Windows 7, 8.1, 10, and various Server versions. This flaw allows an attacker to test for the presence of files on disk by tricking a user into visiting a specially crafted website. Rated with a CVSS score of 6.5 (Medium), this vulnerability has a high confidentiality impact (C:H) and requires user interaction (UI:R) for successful exploitation, typically via a malicious webpage. Despite its medium CVSS score, its FAUCET Risk Score is 99/100, indicating a significant real-world risk. Crucially, CVE-2017-0022 is listed in the KEV catalog, confirming active exploitation in the wild, and has been associated with malvertising campaigns and exploit kits like AdGholas and Neutrino. While no public exploit code is available on Metasploit, Nuclei, or ExploitDB, it has garnered substantial community discussion and media coverage, highlighting its importance to threat actors.