SI
Product
Silverlight
On CISA KEVExploited in the wildRansomware-linked
32
CVEs
4
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 2Low 0
Watch
Add Silverlight to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-0034 RansomwareIn wildKEV | 8.8 | Jan 13 | Microsoft Silverlight Runtime Remote Code Execution Vulnerability Affected: 5.0 before 5.1.41212.0 |
| CVE-2015-1671 In wildKEV | 7.8 | May 13 | Microsoft Windows Remote Code Execution Vulnerability Affected: 5.0 |
| CVE-2013-0074 RansomwareIn wildKEV | 7.8 | Mar 13 | Microsoft Silverlight Double Dereference Vulnerability Affected: 5.0 before 5.1.20125.0 |
| CVE-2013-3896 In wildKEV | 5.5 | Oct 9 | Microsoft Silverlight Information Disclosure Vulnerability Affected: 5.0 before 5.1.20913.0 |
| CVE-2017-8527 | 8.8 | Jun 15 | Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server… Affected: 5.0 |
| CVE-2017-0283 | 8.8 | Jun 15 | Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016,… Affected: 5.0 |
| CVE-2016-3367 | 8.8 | Sep 14 | StringBuilder in Microsoft Silverlight 5 before 5.1.50709.0 does not properly allocate memory for string-insert and string-append operations, which allows remote attackers to… Affected: 5.0 |
| CVE-2017-0108 | 7.8 | Mar 17 | The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5;… Affected: 5.0 |
| CVE-2013-3129 | 7.8 | Jul 10 | Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows… Affected: 5.0.60401.0; 5.0.60818.0; 5.0.60818.0; 5.0.61118.0; 5.1.10411.0; 5.1.20125.0 |
| CVE-2012-0014 | 7.8 | Feb 14 | Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows… Affected: 4.0.50524.00; 4.0.50826.0; 4.0.50917.0; 4.0.51204.0; 4.0.60129.0; 4.0.60310.0; +4 more |
| CVE-2016-3209 | 5.5 | Oct 14 | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;… Affected: 5.0 |
| CVE-2015-6166 | – | Dec 9 | Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read or write access) via unspecified… Affected: 5.0 |
| CVE-2015-6165 | – | Dec 9 | Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information… Affected: 5.0 |
| CVE-2015-6114 | – | Dec 9 | Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information… Affected: 5.0 |
| CVE-2015-6108 | – | Dec 9 | The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT… Affected: 5.0 |
| CVE-2015-2464 | – | Aug 15 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3… Affected: through 5.1.40416.0 |
| CVE-2015-2463 | – | Aug 15 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3… Affected: through 5.1.40416.0 |
| CVE-2015-2456 | – | Aug 15 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10,… Affected: through 5.1.40416.0 |
| CVE-2015-2455 | – | Aug 15 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10,… Affected: through 5.1.40416.0 |
| CVE-2015-2435 | – | Aug 15 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10,… Affected: through 5.1.40416.0 |
| CVE-2015-1715 | – | May 13 | Microsoft Silverlight 5 before 5.1.40416.00 allows remote attackers to bypass intended integrity-level restrictions via a crafted Silverlight application, aka "Microsoft… Affected: through 5.1.30214.0 |
| CVE-2014-0319 | – | Mar 12 | Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and ASLR protection mechanisms via unspecified… Affected: 5.0.60401.0; 5.0.60818.0; 5.0.60818.0; 5.0.61118.0; 5.1.10411.0; 5.1.20125.0; +2 more |
| CVE-2013-3178 | – | Jul 10 | Microsoft Silverlight 5 before 5.1.20513.0 does not properly initialize arrays, which allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer… Affected: 5.0.60401.0; 5.0.60818.0; 5.0.60818.0; 5.0.61118.0; 5.1.10411.0; 5.1.20125.0 |
| CVE-2013-3131 | – | Jul 10 | Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, and Silverlight 5 before 5.1.20513.0, does not properly prevent changes to data in multidimensional arrays of structures,… Affected: 5.0.60401.0; 5.0.60818.0; 5.0.60818.0; 5.0.61118.0; 5.1.10411.0; 5.1.20125.0 |
| CVE-2012-0176 | – | May 9 | Double free vulnerability in Microsoft Silverlight 4 before 4.1.10329 on Windows allows remote attackers to execute arbitrary code via vectors involving crafted XAML glyphs, aka… Affected: 4.0.50401.0; 4.0.50524.00; 4.0.50826.0; 4.0.50917.0; 4.0.51204.0; 4.0.60129.0; +6 more |
| CVE-2012-0159 | – | May 9 | Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview;… Affected: 4.0.50401.0; 4.0.50524.00; 4.0.50826.0; 4.0.50917.0; 4.0.51204.0; 4.0.60129.0; +7 more |
| CVE-2011-1253 | – | Oct 12 | Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.0.60831, does not properly restrict inheritance, which allows remote attackers to… Affected: 4.0.60531.0 |
| CVE-2011-0664 | – | Jun 16 | Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking… Affected: 4.0.60310.0 |
| CVE-2011-1845 | – | May 3 | Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a denial of service (memory consumption)… Affected: through 4.0.60129.0; 2.0.31005.00; 2.0.40115.00; 3.0.40624.00; 3.0.40723.0; 3.0.40818.0; +1 more |
| CVE-2011-1844 | – | May 3 | Memory leak in Microsoft Silverlight 4 before 4.0.60310.0 allows remote attackers to cause a denial of service (memory consumption) via an application involving a popup control… Affected: through 4.0.60129.0; 2.0.31005.00; 2.0.40115.00; 3.0.40624.00; 3.0.40723.0; 3.0.40818.0; +1 more |
| CVE-2010-1898 | – | Aug 11 | The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 before 3.0.50611.0 on Windows and before… Affected: through 3.0.40818.0; 2.0.31005.00; 2.0.40115.00; 3.0.40624.00; 3.0.40723.0; through 3.0.50106.0; +5 more |
| CVE-2010-0019 | – | Aug 11 | Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows remote attackers to execute arbitrary… Affected: through 3.0.40818.0; 3.0.40624.00; 3.0.40723.0; through 3.0.50106.0; 3.0.40624.00; 3.0.40723.0; +1 more |
Showing 32