Microsoft to Patch XML Vulnerability

Microsoft said Thursday that it will patch on Tuesday a recently disclosed vulnerability in Windows' XML Core Services component, along with fixing five other security flaws, the highest rating of which is "critical." The XML flaw is being exploited by zero-day attacks, security experts have warned.

The problem affects a COM control called XMLHTTP that enables a script to request and receive XML data using HTTP protocol, from any site that produces XML data. Microsoft on Tuesday will also issue two non-security updates for Windows via Microsoft Update and Windows Update. Per usual, an update to the company's Malicious Software Removal Tool will be made as well.