MS15-129: Security update for Silverlight to address remote code execution: December 8, 2015

This security update resolves vulnerabilities in Microsoft Silverlight. The most severe of the vulnerabilities could allow remote code execution if Microsoft Silverlight incorrectly handles certain open and close requests that could result in read and write access violations. To exploit the vulnerability, an attacker could host a website that contains a specially crafted Silverlight application and then convince a user to visit a compromised website. The attacker could also take advantage of websites that contain specially crafted content that accept or host user-provided content or advertisements.

An attacker would be unable to force users to visit a compromised website. Instead, an attacker would have to convince a user to take action, such as clicking a link that takes the user to the attacker's website.

To learn more about the vulnerability, see Microsoft Security Bulletin MS15-129.