CVE-2011-1845

Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a denial of service memory consumption via an application involving 1 subscriptions to an INotifyDataErrorInfo.ErrorsChanged event or 2 a TextBlock or TextBox...

CVE-2011-1844

Memory leak in Microsoft Silverlight 4 before 4.0.60310.0 allows remote attackers to cause a denial of service memory consumption via an application involving a popup control and a custom DependencyProperty property, related to lack of garbage collection...

Microsoft Silverlight Runtime Remote Code Execution Vulnerability

Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service DoS...

Microsoft Silverlight Double Dereference Vulnerability

Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application...

BIOPASS RAT: New Malware Sniffs Victims via Live Streaming

We discovered a new malware that targets online gambling companies in China via a watering hole attack, in which visitors are tricked into downloading a malware loader disguised as a legitimate installer for well-known apps such as Adobe Flash Player or Microsoft Silverlight...

VulnCheck KEV: CVE-2013-3896

Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application...

MS15-049: Vulnerability in Silverlight could allow elevation of privilege: May 12, 2015

Resolves a vulnerability in Microsoft Silverlight that could allow elevation of privilege if a specially crafted Silverlight application is run on an affected system.SummaryThis security update resolves a vulnerability in Microsoft Silverlight. The vulnerability could allow elevation of privilege...

July 2014 update for Microsoft Silverlight 5

July 2014 update for Microsoft Silverlight 5 Should I install this update This update is released on July 23, 2014 and offers a new build version 5.1.30514.0 of Microsoft Silverlight. For more information about Silverlight, see the What is Silverlight section. If you have Silverlight installed, o...

Remote code execution

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office Word Viewer, Microsoft Lync 2013 SP1, Skype for...

CVE-2017-0283

CVE-2017-0283 is described in the connected MSKB as a remote code execution vulnerability in Microsoft Office components that could be triggered by opening a specially crafted Office file. The MSKB describes a security update KB3191937 for Skype for Business 2015 (Lync 2013) that addresses CVE-20...

Microsoft Silverlight Multiple Remote Code Execution Vulnerabilities (KB4023307)

This host is missing an important security update according to Microsoft security update KB4023307. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Security Update for Microsoft Silverlight (KB4023307)

This security update to Silverlight includes fixes outlined in KB 4023307. This update is backward compatible with web applications built using previous versions of Silverlight...

Microsoft Windows Uniscribe CVE-2017-0283 Remote Code Execution Vulnerability

Description Microsoft Windows Uniscribe is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Failed exploit attempts may result in a denial of service condition. Technologies Affected Microsoft Live...

KB4023307: Security Update for the Windows Uniscribe Remote Code Execution Vulnerability for Microsoft Silverlight 5 (June 2017)

The version of Silverlight 5 installed on the remote Windows host is missing security update KB4023307. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Windows Uniscribe software due to improper handling of objects in memory. An...

Microsoft Windows Graphics Component CVE-2017-8527 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or webpage. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Failed explo...

Microsoft Silverlight Information Disclosure Vulnerability (KB4017094)

This host is missing an important security update according to Microsoft security update KB4017094. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Security Update for Microsoft Silverlight (KB4017094)

This security update to Silverlight includes fixes outlined in KB 4017094. This update is backward compatible with web applications built using previous versions of Silverlight...

Security update for the libjpeg information disclosure vulnerability for Microsoft Silverlight 5: April 11, 2017

Security update for the libjpeg information disclosure vulnerability for Microsoft Silverlight 5: April 11, 2017 Summary To learn more about the vulnerability, go to CVE-2013-6629. More Information Important All future security and non-security updates for Windows RT 8.1, Windows 8.1, and Windows...

Microsoft Silverlight - ScriptObject Unsafe Memory Access (MS13-022/MS13-087) Exploit

Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule EOS def initializeinfo= superupdateinfoinfo, 'Name' = "MS13-022 Microsof...

Security Update for Microsoft Silverlight (KB4013867)

This security update to Silverlight includes fixes outlined in KB 4013867. This update is backward compatible with web applications built using previous versions of Silverlight...