progress telerik ui for winforms vulnerabilities

Latest progress telerik ui for winforms CVEs

Newest publication first

1. CVE-2025-0332 Progress UI for WinForms decompression path traversal vulnerability

   Published 2025-02-12

   Critical·CVSS 9.8 EPSS 0.40%

   In Progress® Telerik® UI for WinForms, versions prior to 2025 Q1 (2025.1.211), using the improper limitation of a target path can lead to decompressing an archive's content into a restricted directory.

2. CVE-2024-10013 Progress UI for WinForms format provider unsafe deserialization vulnerability

   Published 2024-11-13

   High·CVSS 7.8 EPSS 0.22%

   In Progress Telerik UI for WinForms versions prior to 2024 Q4 (2024.4.1113), a code execution attack is possible through an insecure deserialization vulnerability.

3. CVE-2024-3892 Local code execution vulnerability in Telerik UI for WinForms

   Published 2024-05-15

   Medium·CVSS 6.7 EPSS 0.22%

   A local code execution vulnerability is possible in Telerik UI for WinForms beginning in v2021.1.122 but prior to v2024.2.514. This vulnerability could allow an untrusted theme assembly to execute arbitrary code on the local Windows system.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.