VULNERABILITY INTELLIGENCE

CVE-2010-0019

CVSS score9.3 HIGH
EPSS probability14.37%
CISA KEVNot currently listed
Published2010-08-11
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and framework outage) via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references