ZeroDay Findings
Sign inSign up

Findings

CVE-2013-3896

Microsoft Silverlight Information Disclosure Vulnerability

Published Oct 9, 2013 · updated Jun 16, 2026 · microsoft silverlight

Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."

Timeline

Detection, updates, and resolution for this record.

  1. Oct 9, 2013 · Catalog

    Detected

    Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."

  2. May 25, 2022 · CISA KEV

    Known exploited

    The impacted product is end-of-life and should be disconnected if still in use.

  3. Jun 15, 2022 · CISA KEV

    Remediation due

    The impacted product is end-of-life and should be disconnected if still in use.

  4. Jun 16, 2026 · Catalog

    Updated

    Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."

Required action

The impacted product is end-of-life and should be disconnected if still in use.

CISA due date Jun 15, 2022

Affected

  • cpe microsoft/silverlightversion unspecified
  • vendor Microsoft Silverlightversion unspecified

Sources

  • CISA KEVConfirmed exploitationCVE-2013-3896

    Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.

    cisa.gov
  • CVE.orgVulnerability recordCVE-2013-3896

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2013-3896

    30-day exploitation probability 68.0%

    first.org
  • Exploit DatabasePublic exploit reference41702

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit ModulesPublic exploit moduleexploit_windows/browser/ms13_022_silverlight_script_object

    Public module reference (normal). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDVulnerability recordCVE-2013-3896

    Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."

    nvd.nist.gov

References