Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:silverlight:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductSilverlight (1419407f-14bd-5ea4-85da-8a27e216ef9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-0034 vulnerable 2026-06-08 05:07:14.008395 Details available
Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."
Published: 2016-01-13T02:00:00.000Z
Updated: 2025-10-21T23:55:56.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2464 vulnerable 2026-06-08 05:06:35.061421 Details available
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight before 5.1.40728, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allow remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2015-2463.
Published: 2015-08-15T00:00:00.000Z
Updated: 2024-08-06T05:17:27.003Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2463 vulnerable 2026-06-08 05:06:35.060268 Details available
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight before 5.1.40728, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allow remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2015-2464.
Published: 2015-08-15T00:00:00.000Z
Updated: 2024-08-06T05:17:26.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2456 vulnerable 2026-06-08 05:06:35.055238 Details available
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight before 5.1.40728, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allow remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2015-2455.
Published: 2015-08-15T00:00:00.000Z
Updated: 2024-08-06T05:17:26.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2455 vulnerable 2026-06-08 05:06:35.054048 Details available
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight before 5.1.40728, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allow remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2015-2456.
Published: 2015-08-15T00:00:00.000Z
Updated: 2024-08-06T05:17:26.527Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2435 vulnerable 2026-06-08 05:06:35.043196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1715 vulnerable 2026-06-08 05:06:26.106527 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3896 vulnerable 2026-06-08 05:04:33.095626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0074 vulnerable 2026-06-08 05:03:01.702866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1845 vulnerable 2026-06-08 04:58:02.457042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1844 vulnerable 2026-06-08 04:58:02.452697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1898 vulnerable 2026-06-08 04:54:10.915458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0019 vulnerable 2026-06-08 04:51:52.345031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.