Microsoft Excel Starter 2010 suffers from an XML eXternal Entity vulnerability that allows for remote file disclosure.
5e47959c0286dbdddf39e912d9906ecdaee8abe96d8c8dfcdd4fd187558f36eb
Windows Media Center "ehshell.exe" is vulnerable to an XML External Entity attack allowing remote access to any files on a victim's computer, if they open an XXE laden ".mcl" file via a remote share / USB or from a malicious "windowsmediacenterweb" web link.
81e84ff41d9a618b2336f2ca0312747ef692c4d8fc01abf21b4615f4a4bd02b8
Microsoft Internet Explorer 9 suffers from a CDoc::ExecuteScriptUri use-after-free vulnerability.
f9de3f975097a011dab5539752963abe5f2eb046c2e32c8d386d3f8e8c1aa4a4