Known vulnerabilities in Microsoft Silverlight 5

Vendor: Microsoft
Software: Microsoft Silverlight
Version: 5
Software CPE: cpe:2.3:a:microsoft:microsoft_silverlight:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 14
Public exploits: 6
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Silverlight version 5 Microsoft Silverlight 5 is affected by 14 vulnerabilities: 2 critical, 8 high, 4 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU6060 - Memory corruption
CVE-2017-0108		 CWE-119 High
Public exploit available
No
 - 14.03.2017 SB2017031427
SB2017031501
SB2017031502
and 4 more
#VU5665 - Improper input validation
CVE-2015-2464		 CWE-20 High
Public exploit available
No
 - 08.02.2017 SB2015081103
SB2015081106
#VU5664 - Improper input validation
CVE-2015-2463		 CWE-20 High
Public exploit available
No
 - 08.02.2017 SB2015081103
SB2015081106
#VU5663 - Improper input validation
CVE-2015-2456		 CWE-20 High
Public exploit available
No
 - 08.02.2017 SB2015081103
SB2015081106
#VU5662 - Improper input validation
CVE-2015-2455		 CWE-20 High
Public exploit available
No
 - 08.02.2017 SB2015081103
SB2015081106
#VU5661 - Improper input validation
CVE-2015-2435		 CWE-20 High
No
No
 - 08.02.2017 SB2015081103
SB2015081106
#VU2967 - Improper input validation
CVE-2012-0159		 CWE-20 High
No
Exploited
 - 28.12.2016 SB2012050801
SB2012050802
SB2012050804
#VU1644 - Out-of-bounds read
CVE-2013-6629		 CWE-125 Low
No
No
 - 21.12.2016 SB2016072004
SB2017041204
SB2017041139
and 5 more
#VU965 - Memory corruption
CVE-2016-3396		 CWE-119 High
No
No
 - 13.10.2016 SB2016101102
SB2016101118
#VU963 - Memory corruption
CVE-2016-3393		 CWE-119 Critical
No
Exploited
 - 13.10.2016 SB2016101102
SB2016121332
#VU961 - Missing release of memory after effective lifetime
CVE-2016-3263		 CWE-401 Low
No
No
 - 13.10.2016 SB2016101102
SB2016110820
#VU960 - Missing release of memory after effective lifetime
CVE-2016-3262		 CWE-401 Low
No
No
 - 13.10.2016 SB2016101102
SB2016110819
#VU959 - Missing release of memory after effective lifetime
CVE-2016-3209		 CWE-401 Low
Public exploit available
No
 - 11.10.2016 SB2016101102
SB2016110822
#VU4814 - Improper input validation
CVE-2016-0034		 CWE-20 Critical
No
Exploited
 - 12.01.2016 SB2016011203