01.14.2016 - MS16-006 - Critical: Security Update for Silverlight to Address Remote Code Execution (3126036) - Version: 1.1

Severity Rating: Critical Revision Note: V1.1 (January 14, 2016): Revised the exploit status of CVE-2016-0034. At the time this security bulletin was originally issued, Microsoft received a report that could indicate a limited attack attempting to exploit this vulnerability. This is an informational change only. Customers who have successfully installed the update do not need to take any further action. Summary: This security update resolves a vulnerability in Microsoft Silverlight. The vulnerability could allow remote code execution if a user visits a compromised website that contains a specially crafted Silverlight application. An attacker would have no way to force users to visit a compromised website. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email or instant message that takes users to the attacker's website. - View Microsoft Security Bulletin MS16-006 - View Microsoft Knowledge Base Article - on: 1. - Visit Microsoft Corporation