CVE-2011-1845: Microsoft Silverlight

High severity, CVSS 7.8. EPSS: 12.2% chance of exploitation in the next 30 days.

Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a denial of service (memory consumption) via an application involving (1) subscriptions to an INotifyDataErrorInfo.ErrorsChanged event or (2) a TextBlock or TextBox element.

Affected products

• Microsoft Silverlight: up to and including 4.0.60129.0; version 2.0.31005.00 only; version 2.0.40115.00 only; version 3.0.40624.00 only; version 3.0.40723.0 only; version 3.0.40818.0 only; …

Published 2011-05-03. Last modified 2026-06-16.