microsoft silverlight

Name: microsoft silverlight
Brand: microsoft

productUS

cpe:2.3:a:microsoft:silverlight:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical28high4medium0low

updated 2026-10-28

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-0074US	high7.8OT critical	78.9% (100th)	KEV	5.1.20125.0	2013-03-13	5.0 → 5.1.20125.0
CVE-2013-3896US	medium5.5OT critical	68.0% (99th)	KEV	5.1.20913.0	2013-10-09	5.0 → 5.1.20913.0
CVE-2016-0034US	high8.8OT critical	69.4% (99th)	KEV	5.1.41212.0	2016-01-13	5.0 → 5.1.41212.0
CVE-2015-1671US	high9.3OT critical	48.8% (99th)	KEV	no fix	2015-05-13	= 5.0
CVE-2016-3209US	medium5.5	53.7% (99th)	Exploit	no fix	2016-10-14	= 5.0
CVE-2017-0108US	high7.8	50.5% (99th)	Exploit	no fix	2017-03-17	= 5.0
CVE-2017-0283US	high8.8	39.0% (99th)	Exploit	no fix	2017-06-15	= 5.0
CVE-2015-2455US	high9.3	37.4% (99th)	Exploit	no fix	2015-08-15	≤ 5.1.40416.0
CVE-2015-2464US	high9.3	35.6% (98th)	Exploit	no fix	2015-08-15	≤ 5.1.40416.0
CVE-2015-2456US	high9.3	35.6% (98th)	Exploit	no fix	2015-08-15	≤ 5.1.40416.0
CVE-2015-2463US	high9.3	34.5% (98th)	Exploit	no fix	2015-08-15	≤ 5.1.40416.0
CVE-2013-3129US	high9.3	32.4% (98th)	—	no fix	2013-07-10	5 versions
CVE-2013-3178US	high9.3	32.1% (98th)	—	no fix	2013-07-10	5 versions
CVE-2012-0014US	high9.3	27.8% (98th)	—	no fix	2012-02-14	10 versions
CVE-2012-0159US	high9.3	27.0% (98th)	—	no fix	2012-05-09	13 versions
CVE-2015-6108US	high9.3	26.0% (98th)	—	no fix	2015-12-09	= 5.0
CVE-2010-1898US	high9.3	25.0% (98th)	—	no fix	2010-08-11	7 versions
CVE-2012-0176US	high9.3	22.5% (98th)	—	no fix	2012-05-09	12 versions
CVE-2013-3131US	high9.3	22.0% (98th)	—	no fix	2013-07-10	5 versions
CVE-2015-2435US	high9.3	21.9% (98th)	—	no fix	2015-08-15	≤ 5.1.40416.0
CVE-2015-6114US	medium4.3	19.1% (97th)	—	no fix	2015-12-09	= 5.0
CVE-2017-8527US	high8.8	19.0% (97th)	—	no fix	2017-06-15	= 5.0
CVE-2016-3367US	high8.8	17.8% (97th)	—	no fix	2016-09-14	= 5.0
CVE-2015-6165US	medium4.3	16.3% (97th)	—	no fix	2015-12-09	= 5.0
CVE-2011-0664US	high9.3	16.0% (97th)	—	no fix	2011-06-16	= 4.0.60310.0
CVE-2010-0019US	high9.3	14.4% (97th)	—	no fix	2010-08-11	5 versions
CVE-2015-6166US	high9.3	14.1% (97th)	—	no fix	2015-12-09	= 5.0
CVE-2015-1715US	high9.3	13.2% (96th)	—	no fix	2015-05-13	≤ 5.1.30214.0
CVE-2011-1253US	high9.3	13.2% (96th)	—	no fix	2011-10-12	= 4.0.60531.0
CVE-2011-1845US	high7.8	12.2% (96th)	—	no fix	2011-05-03	7 versions
CVE-2011-1844US	high7.8	12.2% (96th)	—	no fix	2011-05-03	7 versions
CVE-2014-0319US	high7.1	5.92% (93rd)	—	no fix	2014-03-12	7 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation9 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')6 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer5 CVEs
CWE-264CWE-2644 CVEs
CWE-399CWE-3994 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-19CWE-191 CVEs
CWE-822Untrusted Pointer Dereference1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan