coldbraid

CVE-2013-3896 Microsoft Silverlight

Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.

CVSS
not scored

CWE-20

On CISA’s exploited list

Microsoft Silverlight Information Disclosure Vulnerability

Added
2022-05-25
Federal patch deadline
2022-06-15
Ransomware use
not known