CVE-2013-7332

no score yetEPSS 13%

microsoft: no CVSS score yet. EPSS 13% chance of exploitation in the next 30 days.

The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

EPSS: 13% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2014-02-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_8
microsoft:windows_8.1

References

https://soroush.secproject.com/blog/2013/04/microsoft-xmldom-in-ie-can-divulge-information-of-local-drivenetwork-in-error-messages/
https://soroush.secproject.com/blog/2013/04/microsoft-xmldom-in-ie-can-divulge-information-of-local-drivenetwork-in-error-messages/

Check your stack JSON