CVE-2012-0176: Microsoft Silverlight

High severity, CVSS 9.3. EPSS: 22.5% chance of exploitation in the next 30 days.

Double free vulnerability in Microsoft Silverlight 4 before 4.1.10329 on Windows allows remote attackers to execute arbitrary code via vectors involving crafted XAML glyphs, aka "Silverlight Double-Free Vulnerability."

Affected products

• Microsoft Silverlight: version 4.0.50401.0 only; version 4.0.50524.00 only; version 4.0.50826.0 only; version 4.0.50917.0 only; version 4.0.51204.0 only; version 4.0.60129.0 only; …

Published 2012-05-09. Last modified 2026-06-16.