CVE-2012-1889
KEVHIGH 9.3EPSS 83.6%
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVSS v3.1
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v3.1
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v2.0
- 9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C - EPSS
- 83.64% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2022-06-08
- Published
- 2012-06-13
- Updated
- 2025-10-22
Proof-of-concept exploits (7)
- Janddda/PwnSTAR0★ · 2017-05-23
- PleXone2019/PwnSTAR0★ · 2020-01-02
- PleXone2019/PwnSTARR0★ · 2020-01-02
- SilverFoxx/PwnSTAR260★ · 2017-11-19
- l-iberty/cve-2012-18891★ · 2021-06-28
- marrocamp/PwnSTAR0★ · 2015-11-25
- whu-enjoy/CVE-2012-18893★ · 2016-11-17