CVE-2013-0074: Microsoft Silverlight Double Dereference Vulnerability.
Microsoft Silverlight Double Dereference Vulnerability. Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.
- CISA KEV-listed (remediation due 2022-06-15)
- used in ransomware campaigns
- EPSS 93.2% (99.8% percentile)