CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Silverlight Negative Offset Decoding Remote Code Execution Vulnerability (CVE-2016-0034, MS16-006)
[Affected Scope] Microsoft Silverlight 5 versions prior to 5.1.41212.0
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web application
[Mitigation] Upgrade Microsoft Silverlight to version 5.1.41212.0 or later, or completely disable/uninstall the Silverlight plugin from the system
Microsoft DirectWrite TrueType Font Parsing Remote Code Execution Vulnerability (CVE-2015-1671, MS15-044)
[Affected Scope] Microsoft .NET Framework, Office 2007/2010, Lync 2010/2013, and Silverlight 5 utilizing the DirectWrite library
[Impact] Remote attackers can execute arbitrary code (RCE) with the privileges of the active user by tricking the system into rendering a specially crafted TrueType font
[Mitigation] Immediately apply the official Microsoft security updates (MS15-044) and restrict the loading of untrusted fonts via system policies
Microsoft Silverlight Pointer Validation Information Disclosure Vulnerability (CVE-2013-3896, MS13-087)
[Affected Scope] Microsoft Silverlight 5 before version 5.1.20913.0
[Impact] Remote attackers can obtain sensitive information from process memory, potentially bypassing security mitigations like ASLR to facilitate subsequent code execution
[Mitigation] Upgrade Microsoft Silverlight to version 5.1.20913.0 or later, or completely disable/uninstall the Silverlight plugin
Microsoft Silverlight Double Dereference Remote Code Execution Vulnerability (CVE-2013-0074)
[Affected Scope] Microsoft Silverlight 5 and Silverlight 5 Developer Runtime versions prior to 5.1.20125.0
[Impact] Remote attackers can execute arbitrary code with the logged-in user's privileges by enticing users to visit a website containing a specially crafted Silverlight application
[Mitigation] Upgrade Microsoft Silverlight to version 5.1.20125.0 or later, or completely uninstall the Silverlight plugin from all endpoints