CVE-2013-3896

Medium · 5.5 CISA KEV

CVSS

5.5

EPSS

68.0%

Published

Oct 9, 2013

CISA due date

Jun 15, 2022

The record

Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."

Affected packages

Ecosystem	Package	Introduced	Fixed