CVE-2013-3896
Microsoft Silverlight Information Disclosure Vulnerability
Published Oct 9, 2013 · updated Jun 16, 2026 · microsoft silverlight
Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."
Timeline
Detection, updates, and resolution for this record.
Oct 9, 2013 · Catalog
Detected
Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."
May 25, 2022 · CISA KEV
Known exploited
The impacted product is end-of-life and should be disconnected if still in use.
Jun 15, 2022 · CISA KEV
Remediation due
The impacted product is end-of-life and should be disconnected if still in use.
Jun 16, 2026 · Catalog
Updated
Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."
Required action
The impacted product is end-of-life and should be disconnected if still in use.
CISA due date Jun 15, 2022
Affected
- cpe microsoft/silverlightversion unspecified
- vendor Microsoft Silverlightversion unspecified
Sources
- CISA KEVCVE-2013-3896
Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.
cisa.gov - CVE.orgCVE-2013-3896
Official CVE identifier
cve.org - FIRST EPSSCVE-2013-3896
30-day exploitation probability 68.0%
first.org - Exploit Database41702
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_windows/browser/ms13_022_silverlight_script_object
Public module reference (normal). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2013-3896
Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."
nvd.nist.gov