An unpatched Windows vulnerability considered a critical threat by security experts is being exploited by cybercriminals. Microsoft disclosed the flaw in XML Core Services (MSXML) 3.0, 4.0 and 6.0 June 12. A successful attacker could use the vulnerability to gain full user rights to a PC, Microsoft said. The vulnerability is easily exploited through Internet Explorer through a web page crafted to take advantage of the flaw. Cybercriminals often hide malware on legitimate websites for so-called drive-by installs.”]
Source: https://www.csoonline.com/article/2131866/hackers-exploit-windows-xml-core-services-flaw.html