CVE-2015-6165: Microsoft Silverlight

Medium severity, CVSS 4.3. EPSS: 16.3% chance of exploitation in the next 30 days.

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6114.

Affected products

• Microsoft Silverlight: version 5.0 only

Published 2015-12-09. Last modified 2026-06-17.