CVE-2024-10095

CVE-2024-10095 affects Progress Telerik UI for WPF. The vulnerability stems from an insecure deserialization pathway that can enable a code execution attack. Affected products are Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213). The connected sources consistently describe the issue as ...

CVE-2024-8316

CVE-2024-8316 affects Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924). It is caused by an insecure deserialization vulnerability that can lead to remote code execution (documented as a code execution attack). The CVE entry notes a local attack vector with low privileges and no ...

CVE-2024-7576

CVE-2024-7576 affects Progress Telerik UI for WPF prior to 2024 Q3 (2024.3.924). The issue is an insecure deserialization vulnerability that enables a code execution attack. Affected product: Telerik UI for WPF; vulnerable component/vector: insecure deserialization (exact file/function not specif...

CVE-2024-7575

Progress Telerik UI for WPF prior to 2024 Q3 (2024.3.924) is affected by a command-injection vulnerability due to improper neutralization of hyperlink elements. Affected component: UI for WPF controls; root cause is inadequate handling of hyperlink elements. Impact per sources: high/critical risk...

CVE-2024-7679

Summary: CVE-2024-7679 affects Progress Telerik UI for WinForms prior to 2024 Q3 (2024.3.924). The root cause is improper neutralization of hyperlink elements, enabling a command injection attack. What’s affected: Progress Telerik UI for WinForms versions before 2024.3.924. Impact: potential comm...

CVE-2024-10012

The CVE-2024-10012 entry concerns Progress Telerik UI for WPF. Affected software: Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1111). Issue: insecure deserialization leading to a code execution attack. Impact: described as a code execution vulnerability with HIGH severity in offi...