CVE-2025-0332

CVE-2025-0332 affects Progress Telerik UI for WinForms. Prior to 2025 Q1 (2025.1.211), improper limitation of a target path enables path traversal when decompressing archive contents into a restricted directory. Impact involves potential exposure/manipulation of data (confidentiality, integrity, ...

PT-2025-6781 · Progress · In Progress Telerik Ui For Winforms

Name of the Vulnerable Software and Affected Versions: In Progress Telerik UI for WinForms versions prior to 2025 Q1 2025.1.211 Description: The issue is related to the improper limitation of a target path, which can lead to decompressing an archive's content into a restricted directory. This can...

CVE-2024-7679 Improper neutralization special element in hyperlinks

In Progress Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...

PT-2024-28275 · Telerik · Telerik Ui For Winforms

Name of the Vulnerable Software and Affected Versions: Telerik UI for WinForms versions 2021.1.122 through 2024.2.514 Description: A local code execution issue is possible, allowing an untrusted theme assembly to execute arbitrary code on the local Windows system. This could lead to system...