Silverlight vulnerabilities

4 known vulnerabilities in Silverlight from Microsoft. 3 are rated high or critical, and 4 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Microsoft Silverlight Runtime Remote Code Execution Exploited

  CVE-2016-0034Jan 13, 2016MicrosoftEPSS 69.4%

  Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code

• 9.3 High severity

  Microsoft Windows Remote Code Execution Exploited

  CVE-2015-1671May 13, 2015MicrosoftEPSS 48.8%

  The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before

• 5.5 Medium severity

  Microsoft Silverlight Information Disclosure Exploited

  CVE-2013-3896Oct 9, 2013MicrosoftEPSS 67.1%

  Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."

• 7.8 High severity

  Microsoft Silverlight Double Dereference Exploited

  CVE-2013-0074Mar 13, 2013MicrosoftEPSS 78.9%

  Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Derefe