Microsoft Silverlight Information Disclosure Vulnerability
Microsoft · Silverlight
Date added (CISA)
2022-05-25
Remediation due
2022-06-15
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.