As an alternative to MSXML, the Apache XML Project's Xerces library comes with a com wrapper that will make it act as a drop-in replacement for MSXML in many cases.

作为MSXML的替代品，“Apache XML项目”的xerces库附带了一个COM封装器，这可以使它在许多情况下充当MSXML的仿制品。

youdao

Microsoft's XML Parser (MSXML) Version 4 or Version 6: To use the dw-transform.vbs script to transform your article or tutorial, you need either version 4 or version 6 of the MSXML parser.

Microsoft XML 解析器（MSXML）：为了使用 dw-transform.vbs 脚本来转换您的文章或教程，您需要最新版本的 MSXML 解析器。

youdao

The vulnerability exists when MSXML attempts to access an object in memory that has not been initialized, which may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the logged-on user.

FORBES: Connect