CVE-2024-10012
In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1111), a code execution attack is possible through an insecure deserialization vulnerability.
- Score
- CVSS 3.1 7.8 High
- Status
- Analyzed - security@progress.com
- Published
- 2024-11-13
- Last modified
- 2024-11-13
- Weaknesses
- CWE-502
Affected products
- Progress Telerik Ui For Wpf Versions (Progress Software)
- Telerik Ui For Wpf (Progress Software)
- Ui For Wpf (Telerik)
References
- https://docs.telerik.com/devtools/wpf/knowledge-base/kb-security-unsafe-deserialization-cve-2024-10012
