CVE-2016-0034
Microsoft Silverlight Runtime Remote Code Execution Vulnerability
Published Jan 12, 2016 · updated Aug 13, 2026 · microsoft silverlight
Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Jan 12, 2016 · Catalog
Detected
Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."
May 25, 2022 · CISA KEV
Known exploited
The impacted products are end-of-life and should be disconnected if still in use.
Jun 15, 2022 · CISA KEV
Remediation due
The impacted products are end-of-life and should be disconnected if still in use.
Aug 13, 2026 · Catalog
Updated
Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."
Required action
The impacted products are end-of-life and should be disconnected if still in use.
CISA due date Jun 15, 2022
Affected
- cpe microsoft/silverlightversion unspecified
- vendor Microsoft Silverlightversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2016-0034
Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).
cisa.gov - CVE.orgVulnerability recordCVE-2016-0034
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2016-0034
30-day exploitation probability 69.4%
first.org - NIST NVDVulnerability recordCVE-2016-0034
Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerabi
nvd.nist.gov