CVE-2013-0074—Microsoft Silverlight Double Dereference Vulnerability

PUBLISHEDvulnerability record
2022-05-25 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2013-0074
Project:
Microsoft
Product:
Silverlight
Date Added:
2022-05-25
Due Date:
2022-06-15
Last Updated:
June 21, 2025

Vulnerability Name

Microsoft Silverlight Double Dereference Vulnerability

Description

Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

The impacted product is end-of-life and should be disconnected if still in use.

Additional Notes

  • https://nvd.nist.gov/vuln/detail/CVE-2013-0074
browse all CVEs