CVE-2013-0096: Microsoft Windows Essentials

Medium severity, CVSS 6.8. EPSS: 30.9% chance of exploitation in the next 30 days.

Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."

Affected products

• Microsoft Windows Essentials: version 2011 only; version 2012 only

Published 2013-05-15. Last modified 2026-06-16.