Insecure Deserialization Vulnerability in Progress Telerik UI for WPF
CVE-2024-10012

7.8HIGH

Key Information:

Vendor

Telerik

Status
Ui For WPf
Vendor
CVE Published:
13 November 2024

What is CVE-2024-10012?

An insecure deserialization vulnerability in Progress Telerik UI for WPF has been identified, affecting all versions prior to 2024 Q4 (2024.4.1111). This vulnerability opens the door for attackers to exploit the system, potentially leading to arbitrary code execution within the application. It is crucial for users of affected versions to apply the necessary updates to mitigate the risks associated with this vulnerability.

References

https://docs.telerik.com/devtools/wpf/knowledge-base/kb-s...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.