CVE-2013-3896

Katalog CVE

CVSS 5.5 · Medium KEV · sudah dieksploitasi EPSS 68,0%

Kerentanan pada microsoft silverlight. Skor CVSS 3.1 5.5 (Medium) menurut NVD. Masuk katalog KEV CISA pada 25 Mei 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."

Rincian

Terbit di NVD

9 Oktober 2013

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N · uraikan di kalkulator

EPSS (30 hari)

68,0% peluang dieksploitasi; lebih tinggi dari 99,3% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Microsoft Silverlight Information Disclosure Vulnerability

Masuk KEV

25 Mei 2022

Tenggat CISA

15 Juni 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

The impacted product is end-of-life and should be disconnected if still in use.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-087 patch · advisory vendor
• http://www.us-cert.gov/ncas/alerts/TA13-288A advisory pihak ketiga · pemerintah AS
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-3896 pemerintah AS
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19003 broken link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19055 broken link