CVE-2013-0074VulnerabilityPublished 05/25/2022Updated 10/24/2026
CVE-2013-0074: Microsoft Silverlight Double Dereference Vulnerability
Affects Microsoft SilverlightSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 05/25/2022
- KEV deadline
- 06/15/2022
- Ransomware
- Used in ransomware campaigns
- EPSS
- 78.9% chance of exploitation in 30 days – higher than 99% of CVEs
What to do
CISA required action
The impacted product is end-of-life and should be disconnected if still in use.
Description
CVE-2013-0074 is a high-severity vulnerability in Microsoft Silverlight where improper pointer validation during HTML object rendering allows remote attackers to execute arbitrary code via a crafted Silverlight application. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.