CVE-2013-3896

CVE-2013-3896 is a critical information disclosure vulnerability in Microsoft Silverlight 5 prior to version 5.1.20913.0. It allows remote attackers to obtain sensitive information by crafting a malicious Silverlight application that exploits improper pointer validation during element access. This vulnerability has a CVSS score of 5.5 (Medium) but is considered highly severe due to its active exploitation, ease of attack (low complexity, user interaction required), and potential for complete confidentiality compromise. It is listed in CISA's KEV catalog, has a FAUCET Risk Score of 100/100, and exploit modules are publicly available, including a Metasploit module, indicating widespread exploitability and significant community attention.