[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKXzM4dhCM-0d432QbaHDgrprptr-fDBV-rxGuRu-cr0":3,"g5a-family:microsoft\u002Fsilverlight":200,"g5a-ex:microsoft\u002Fsilverlight@*":201},{"success":4,"data":5},true,{"product":6,"versions":76,"topVulnerabilitiesByEpss":104,"kevVulnerabilities":161,"seoMetadata":178,"meta":197},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":75},"microsoft","silverlight",27,32,4,"2017-06-15",[14,19,21,23,25,27,30,32,34,36,38,40,42,44,46,48,50,52,54,58,61,63,65,67,69,71,73],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"2.0.31005.00",3,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"2.0.40115.00",{"version":22,"cve_count":11,"kev_count":17,"has_kev":18},"3.0.40624.00",{"version":24,"cve_count":11,"kev_count":17,"has_kev":18},"3.0.40723.0",{"version":26,"cve_count":11,"kev_count":17,"has_kev":18},"3.0.40818.0",{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},"3.0.50106.0",2,{"version":31,"cve_count":29,"kev_count":17,"has_kev":18},"4.0.50401.0",{"version":33,"cve_count":16,"kev_count":17,"has_kev":18},"4.0.50524.00",{"version":35,"cve_count":16,"kev_count":17,"has_kev":18},"4.0.50826.0",{"version":37,"cve_count":16,"kev_count":17,"has_kev":18},"4.0.50917.0",{"version":39,"cve_count":16,"kev_count":17,"has_kev":18},"4.0.51204.0",{"version":41,"cve_count":16,"kev_count":17,"has_kev":18},"4.0.60129.0",{"version":43,"cve_count":11,"kev_count":17,"has_kev":18},"4.0.60310.0",{"version":45,"cve_count":29,"kev_count":17,"has_kev":18},"4.0.603310.0",{"version":47,"cve_count":11,"kev_count":17,"has_kev":18},"4.0.60531.0",{"version":49,"cve_count":16,"kev_count":17,"has_kev":18},"4.0.60831.0",{"version":51,"cve_count":29,"kev_count":17,"has_kev":18},"4.1.10111",{"version":53,"cve_count":29,"kev_count":17,"has_kev":18},"4.1.10111.0",{"version":55,"cve_count":56,"kev_count":57,"has_kev":4},"5.0",10,1,{"version":59,"cve_count":60,"kev_count":17,"has_kev":18},"5.0.60401.0",5,{"version":62,"cve_count":60,"kev_count":17,"has_kev":18},"5.0.60818.0",{"version":64,"cve_count":60,"kev_count":17,"has_kev":18},"5.0.61118.0",{"version":66,"cve_count":11,"kev_count":17,"has_kev":18},"5.1.10411.0",{"version":68,"cve_count":11,"kev_count":17,"has_kev":18},"5.1.20125.0",{"version":70,"cve_count":57,"kev_count":17,"has_kev":18},"5.1.20513.0",{"version":72,"cve_count":57,"kev_count":17,"has_kev":18},"5.1.20913.0",{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},"5.1.30214.0","Silverlight by Microsoft is a technology product with 27 tracked versions and 32 known security vulnerabilities including 4 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":11,"kev_count":17,"has_kev":18},{"version":24,"cve_count":11,"kev_count":17,"has_kev":18},{"version":26,"cve_count":11,"kev_count":17,"has_kev":18},{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},{"version":31,"cve_count":29,"kev_count":17,"has_kev":18},{"version":33,"cve_count":16,"kev_count":17,"has_kev":18},{"version":35,"cve_count":16,"kev_count":17,"has_kev":18},{"version":37,"cve_count":16,"kev_count":17,"has_kev":18},{"version":39,"cve_count":16,"kev_count":17,"has_kev":18},{"version":41,"cve_count":16,"kev_count":17,"has_kev":18},{"version":43,"cve_count":11,"kev_count":17,"has_kev":18},{"version":45,"cve_count":29,"kev_count":17,"has_kev":18},{"version":47,"cve_count":11,"kev_count":17,"has_kev":18},{"version":49,"cve_count":16,"kev_count":17,"has_kev":18},{"version":51,"cve_count":29,"kev_count":17,"has_kev":18},{"version":53,"cve_count":29,"kev_count":17,"has_kev":18},{"version":55,"cve_count":56,"kev_count":57,"has_kev":4},{"version":59,"cve_count":60,"kev_count":17,"has_kev":18},{"version":62,"cve_count":60,"kev_count":17,"has_kev":18},{"version":64,"cve_count":60,"kev_count":17,"has_kev":18},{"version":66,"cve_count":11,"kev_count":17,"has_kev":18},{"version":68,"cve_count":11,"kev_count":17,"has_kev":18},{"version":70,"cve_count":57,"kev_count":17,"has_kev":18},{"version":72,"cve_count":57,"kev_count":17,"has_kev":18},{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},[105,113,119,126,132,137,142,146,154,158],{"cveId":106,"description":107,"publishedDate":108,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":112},"CVE-2013-0074","Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka \"Silverlight Double Dereference Vulnerability.\"","2013-03-13",7.8,"v3.1","High",0.78885,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":118},"CVE-2016-0034","Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka \"Silverlight Runtime Remote Code Execution Vulnerability.\"","2016-01-13",8.8,0.69397,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"cvssVersion":110,"severity":124,"isKev":4,"epssScore":125},"CVE-2013-3896","Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka \"Silverlight Vulnerability.\"","2013-10-09",5.5,"Medium",0.67959,{"cveId":127,"description":128,"publishedDate":129,"cvssScore":123,"cvssVersion":130,"severity":124,"isKev":18,"epssScore":131},"CVE-2016-3209","Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; Live Meeting 2007 Console; .NET Framework 3.0 SP2, 3.5, 3.5.1, 4.5.2, and 4.6; and Silverlight 5 allows remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka \"True Type Font Parsing Information Disclosure Vulnerability.\"","2016-10-14","v3.0",0.53653,{"cveId":133,"description":134,"publishedDate":135,"cvssScore":109,"cvssVersion":130,"severity":111,"isKev":18,"epssScore":136},"CVE-2017-0108","The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka \"Graphics Component Remote Code Execution Vulnerability.\" This vulnerability is different from that described in CVE-2017-0014.","2017-03-17",0.5047,{"cveId":138,"description":139,"publishedDate":140,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":141},"CVE-2015-1671","The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka \"TrueType Font Parsing Vulnerability.\"","2015-05-13",0.48986,{"cveId":143,"description":144,"publishedDate":12,"cvssScore":117,"cvssVersion":130,"severity":111,"isKev":18,"epssScore":145},"CVE-2017-0283","Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office Word Viewer, Microsoft Lync 2013 SP1, Skype for Business 2016, Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows, and Microsoft Silverlight 5 when installed on Microsoft Windows allows a remote code execution vulnerability due to the way it handles objects in memory, aka \"Windows Uniscribe Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8528.",0.39019,{"cveId":147,"description":148,"publishedDate":149,"cvssScore":150,"cvssVersion":151,"severity":152,"isKev":18,"epssScore":153},"CVE-2015-2455","Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight before 5.1.40728, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allow remote attackers to execute arbitrary code via a crafted TrueType font, aka \"TrueType Font Parsing Vulnerability,\" a different vulnerability than CVE-2015-2456.","2015-08-15",9.3,"v2","Critical",0.37429,{"cveId":155,"description":156,"publishedDate":149,"cvssScore":150,"cvssVersion":151,"severity":152,"isKev":18,"epssScore":157},"CVE-2015-2464","Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight before 5.1.40728, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allow remote attackers to execute arbitrary code via a crafted TrueType font, aka \"TrueType Font Parsing Vulnerability,\" a different vulnerability than CVE-2015-2463.",0.35562,{"cveId":159,"description":160,"publishedDate":149,"cvssScore":150,"cvssVersion":151,"severity":152,"isKev":18,"epssScore":157},"CVE-2015-2456","Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight before 5.1.40728, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allow remote attackers to execute arbitrary code via a crafted TrueType font, aka \"TrueType Font Parsing Vulnerability,\" a different vulnerability than CVE-2015-2455.",[162,167,170,174],{"cveId":106,"description":107,"publishedDate":108,"cvssScore":109,"severity":111,"isKev":4,"epssScore":112,"cisaVulnName":163,"cisaDateAdded":164,"cisaShortDescription":165,"cisaRequiredAction":166},"Microsoft Silverlight Double Dereference Vulnerability","2022-05-25","Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"severity":124,"isKev":4,"epssScore":125,"cisaVulnName":168,"cisaDateAdded":164,"cisaShortDescription":169,"cisaRequiredAction":166},"Microsoft Silverlight Information Disclosure Vulnerability","Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.",{"cveId":138,"description":139,"publishedDate":140,"cvssScore":109,"severity":111,"isKev":4,"epssScore":141,"cisaVulnName":171,"cisaDateAdded":164,"cisaShortDescription":172,"cisaRequiredAction":173},"Microsoft Windows Remote Code Execution Vulnerability","A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts.","Apply updates per vendor instructions.",{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"severity":111,"isKev":4,"epssScore":118,"cisaVulnName":175,"cisaDateAdded":164,"cisaShortDescription":176,"cisaRequiredAction":177},"Microsoft Silverlight Runtime Remote Code Execution Vulnerability","Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).","The impacted products are end-of-life and should be disconnected if still in use.",{"title":179,"metaDescription":180,"keywords":181,"structuredData":182},"Silverlight by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Silverlight by Microsoft covering 27 versions with 32 tracked vulnerabilities including 0 critical and 3 high-severity issues and 4 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Silverlight vulnerabilities, Silverlight security, Silverlight CVE, Microsoft Silverlight, Silverlight threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Silverlight KEV, Silverlight exploited vulnerabilities",{"@context":183,"@type":184,"name":185,"description":180,"url":186,"manufacturer":187,"applicationCategory":191,"softwareVersion":192,"mainEntity":193},"https:\u002F\u002Fschema.org","SoftwareApplication","Silverlight","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fsilverlight",{"@type":188,"name":189,"url":190},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","27 versions tracked",{"@type":194,"name":195,"description":196,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Silverlight Security Vulnerabilities","Security vulnerabilities affecting Silverlight by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":198,"apiVersion":199},"2026-10-16T23:05:00.779Z","3.0",[],{"rows":202,"total":11,"capped":18,"failed":17},[203,208,213,217],{"cveId":106,"name":163,"severity":111,"cvss":109,"added":164,"epss":112,"published":204,"ranges":205,"checked":4,"hits":207,"covers":18},"2013-03-13T00:55:01.137",[206],"5.0 to before 5.1.20125.0",[],{"cveId":120,"name":168,"severity":124,"cvss":123,"added":164,"epss":125,"published":209,"ranges":210,"checked":4,"hits":212,"covers":18},"2013-10-09T14:53:25.23",[211],"5.0 to before 5.1.20913.0",[],{"cveId":138,"name":171,"severity":111,"cvss":109,"added":164,"epss":141,"published":214,"ranges":215,"checked":4,"hits":216,"covers":18},"2015-05-13T10:59:03.91",[55],[],{"cveId":114,"name":175,"severity":111,"cvss":117,"added":164,"epss":118,"published":218,"ranges":219,"checked":4,"hits":221,"covers":18},"2016-01-13T05:59:22.657",[220],"5.0 to before 5.1.41212.0",[]]