The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 59.2%.
Microsoft
XSS
Anti Cross Site Scripting Library
NVD
Exploit-DB
CVSS 2.0
4.3
EPSS
59.2%
Threat
4.1
The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean. Rated medium severity (CVSS 6.9). No vendor patch available.
Privilege Escalation
Microsoft
Windows Server 2003
Windows Server 2008
Windows Vista
+1
NVD
CVSS 2.0
6.9
EPSS
3.7%