CVE-2016-0034

KEV · Ransomware

Microsoft Silverlight Runtime Remote Code Execution Vulnerability

View CVE record →

Vendor / Project: Microsoft
Product: Silverlight
Date added: May 25, 2022
Due date: Jun 15, 2022
Known ransomware use: Known
CWEs: CWE-20

Description

Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).

Required action

The impacted products are end-of-life and should be disconnected if still in use.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2016-0034