CVE-2016-0034
Microsoft Silverlight Runtime Remote Code Execution Vulnerability
CVSS
8.8
High
EPSS
69.4%
p99
KEV
YES
May 25, 2022
Exploit Today
80
0-100
Published: Jan 13, 2016 · Last modified: Aug 14, 2026
Product
Microsoft / Silverlight
Vulnerability
Microsoft Silverlight Runtime Remote Code Execution Vulnerability
Added to KEV
May 25, 2022
Remediate by
Jun 15, 2022
Known ransomware use
Yes
Summary description
Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).
Required action
The impacted products are end-of-life and should be disconnected if still in use.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2016-0034
Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."
- www.securitytracker.comhttp://www.securitytracker.com/id/1034655
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-006
- www.securitytracker.comhttp://www.securitytracker.com/id/1034655
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-006
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0034