CVE-2016-0034CISA KEVEPSS p99.3%

CVE-2016-0034Microsoft Silverlight Runtime Remote Code Execution Vulnerability

Microsoft / Silverlight

Description

Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).

Scoring

CVSS 8.8 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS69.40% probability of exploitation · percentile 99.3% · 2026-10-03T12:00:21Z
Last modified2026-08-14

CISA KEV entry

Added to KEV: 2022-05-25

(incoming)1

TypeTargetConfidenceTier
KEVEntryMicrosoft Silverlight Runtime Remote Code Execution Vulnerabilitykev-cve-2016-00340%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Microsoft Silverlight Double Dereference Vulnerability
CVE
Microsoft Silverlight Information Disclosure Vulnerability
CVE
Microsoft Windows Remote Code Execution Vulnerability
CVE
Microsoft .NET Framework Remote Code Execution Vulnerability
CVE
Adobe Flash Player Arbitrary Code Execution Vulnerability
CVE
Adobe Flash Player Remote Code Execution Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.