CVE-2011-1844: Microsoft Silverlight

High severity, CVSS 7.8. EPSS: 12.2% chance of exploitation in the next 30 days.

Memory leak in Microsoft Silverlight 4 before 4.0.60310.0 allows remote attackers to cause a denial of service (memory consumption) via an application involving a popup control and a custom DependencyProperty property, related to lack of garbage collection.

Affected products

• Microsoft Silverlight: up to and including 4.0.60129.0; version 2.0.31005.00 only; version 2.0.40115.00 only; version 3.0.40624.00 only; version 3.0.40723.0 only; version 3.0.40818.0 only; …

Published 2011-05-03. Last modified 2026-06-16.