CVE Watch—

CVE-2013-3896

Microsoft Silverlight Information Disclosure Vulnerability

CVSS

—

Sin CVSS

EPSS

68.0%

p99

KEV

SÍ

25 may 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

68.0%EPSS · 30 días69.6%

2026-09-172026-10-14

Ficha del catálogo KEV

Producto

Microsoft / Silverlight

Vulnerabilidad

Microsoft Silverlight Information Disclosure Vulnerability

Añadido a KEV

25 may 2022

Remediar antes de

15 jun 2022

Uso conocido en ransomware

Descripción resumida

Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.

Acción requerida

The impacted product is end-of-life and should be disconnected if still in use.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2013-3896

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2016-00348.8 ALT

99.4%

KEV—80Microsoft Silverlight Runtime Remote Code Execution Vulnerability63d CVE-2013-00747.8 ALT

99.6%

KEV—80Microsoft Silverlight Double Dereference Vulnerability63d