Silverlight
Vendor:
First CVE: Aug 11, 2010 · Active for 15 years
32
Total CVEs
More Total CVEs than 96% of tracked products
4.0
Avg CVEs / Year
Higher CVE frequency than 83% of tracked products
8.3
Avg CVSS
Higher Avg CVSS than 73% of tracked products
12.5%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Silverlight over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 11, 2010
15 years ago
Most Recent CVE
Jun 15, 2017
3,326 days ago
CVE Severity & Scoring
Silverlight32 CVEs
13%
88%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local7 (21.9%)
Network4 (12.5%)
Unknown21 (65.6%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low11 (34.4%)
High0 (0.0%)
Unknown21 (65.6%)
User Interaction
None0 (0.0%)
Unknown21 (65.6%)
Required11 (34.4%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None11 (34.4%)
Unknown21 (65.6%)
Top CVEs
Signals from CVEs in this product scope (32 CVEs).
32 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-0074HIGH Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbi | Mar 13, 2013 | 7.8 | 97 | YES | YES |
CVE-2013-3896MEDIUM Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information | Oct 9, 2013 | 5.5 | 94 | YES | YES |
CVE-2016-0034HIGH Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object | Jan 13, 2016 | 8.8 | 92 | YES | NO |
CVE-2015-1671HIGH The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 20 | May 13, 2015 | 7.8 | 85 | YES | NO |
CVE-2015-2455HIGH Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office | Aug 15, 2015 | 9.3 | 61 | NO | YES |
CVE-2016-3209MEDIUM Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows | Oct 14, 2016 | 5.5 | 60 | NO | YES |
CVE-2017-0108HIGH The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows | Mar 17, 2017 | 7.8 | 57 | NO | YES |
CVE-2017-0283HIGH Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Micr | Jun 15, 2017 | 8.8 | 55 | NO | YES |
CVE-2015-2464HIGH Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 an | Aug 15, 2015 | 9.3 | 52 | NO | YES |
CVE-2015-2463HIGH Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 an | Aug 15, 2015 | 9.3 | 52 | NO | YES |
Exploit Exposure
Signals from CVEs in this product scope (32 CVEs).
CISA KEV
4 CVEs
12.5% of CVEs· 97th percentile
Metasploit
2 CVEs
6.2% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
9 CVEs
28.1% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (32 CVEs).
Media Mentions
Signals from CVEs in this product scope (32 CVEs).
Top CNAs Publishing CVEs For Silverlight
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.1.20913.0 | 1 | 7.1 | 6.0% | 0 | 0 |
| 5.1.20513.0 | 1 | 7.1 | 6.0% | 0 | 0 |
| 5.1.20125.0 | 4 | 8.4 | 23.1% | 0 | 0 |
| 5.1.10411.0 | 4 | 8.4 | 23.1% | 0 | 0 |
| 5.0.61118.0 | 5 | 8.6 | 23.9% | 0 | 0 |
| 5.0.60818.0 | 5 | 8.5 | 23.5% | 0 | 0 |
| 5.0.60401.0 | 5 | 8.6 | 23.9% | 0 | 0 |
| 5.0 | 10 | 7.5 | 31.1% | 1 | 3 |
| 4.1.10111.0 | 2 | 9.3 | 24.8% | 0 | 0 |
| 4.1.10111 | 2 | 8.6 | 25.3% | 0 | 0 |
| 4.0.60831.0 | 3 | 8.8 | 25.9% | 0 | 0 |
| 4.0.60531.0 | 4 | 8.9 | 22.7% | 0 | 0 |
| 4.0.603310.0 | 2 | 8.6 | 25.3% | 0 | 0 |
| 4.0.60310.0 | 4 | 8.9 | 23.4% | 0 | 0 |
| 4.0.60129.0 | 3 | 8.8 | 25.9% | 0 | 0 |
| 4.0.51204.0 | 3 | 8.8 | 25.9% | 0 | 0 |
| 4.0.50917.0 | 3 | 8.8 | 25.9% | 0 | 0 |
| 4.0.50826.0 | 3 | 8.8 | 25.9% | 0 | 0 |
| 4.0.50524.00 | 3 | 8.8 | 25.9% | 0 | 0 |
| 4.0.50401.0 | 2 | 9.3 | 24.8% | 0 | 0 |