CVE Watch—

CVE-2013-3896

Microsoft Silverlight Information Disclosure Vulnerability

CVSS

—

No CVSS

EPSS

68.0%

p99

KEV

YES

May 25, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

68.0%EPSS · 30 days69.6%

2026-09-172026-10-14

KEV catalog record

Product

Microsoft / Silverlight

Vulnerability

Microsoft Silverlight Information Disclosure Vulnerability

Added to KEV

May 25, 2022

Remediate by

Jun 15, 2022

Known ransomware use

Summary description

Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2013-3896

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2016-00348.8 HIG

99.4%

KEV—80Microsoft Silverlight Runtime Remote Code Execution Vulnerability63d CVE-2013-00747.8 HIG

99.6%

KEV—80Microsoft Silverlight Double Dereference Vulnerability63d