Microsoft Silverlight vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Silverlight: 4 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:silverlight
CVE-2016-0034
High · 8.8
KEV High · 66 Ransomware Jan 13, 2016
Microsoft Silverlight Runtime Remote Code Execution Vulnerability
Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."
CVE-2015-1671
High · 7.8
KEV High · 56 May 13, 2015
Microsoft Windows Remote Code Execution Vulnerability
The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability."
CVE-2013-3896
Medium · 5.5
KEV Urgent · 73 Public exploit Oct 9, 2013
Microsoft Silverlight Information Disclosure Vulnerability
Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."
CVE-2013-0074
High · 7.8
KEV Urgent · 86 Public exploit Ransomware Mar 12, 2013
Microsoft Silverlight Double Dereference Vulnerability
Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."