CVE-2025-0332

CVE-2025-0332 affects Progress Telerik UI for WinForms. Prior to 2025 Q1 (2025.1.211), improper limitation of a target path enables path traversal when decompressing archive contents into a restricted directory. Impact involves potential exposure/manipulation of data (confidentiality, integrity, ...

CVE-2024-10013

CVE-2024-10013 affects Progress Telerik UI for WinForms versions prior to 2024 Q4 (2024.4.1113). The vulnerability is an insecure deserialization leading to code execution. Underlying issue: deserialization of untrusted data within the WinForms UI suite. Impact is described as total in the risk m...

CVE-2024-3892

CVE-2024-3892 affects Telerik UI for WinForms. The vulnerability allows a local code execution through an untrusted theme assembly on Windows, starting from version 2021.1.122 and affecting versions before 2024.2.514. Practical impact is local compromise when processing a theme assembly within th...