CVE-2013-3896—Microsoft Silverlight Information Disclosure Vulnerability

PUBLISHEDvulnerability record
2022-05-25 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2013-3896
Project:
Microsoft
Product:
Silverlight
Date Added:
2022-05-25
Due Date:
2022-06-15
Last Updated:
June 21, 2025

Vulnerability Name

Microsoft Silverlight Information Disclosure Vulnerability

Description

Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
Unknown

Action

The impacted product is end-of-life and should be disconnected if still in use.

Additional Notes

  • https://nvd.nist.gov/vuln/detail/CVE-2013-3896

Related Weaknesses

browse all CVEs