High severity7.8NVD Advisory· Published Nov 13, 2024· Updated Jun 17, 2026

CVE-2024-10013

Description

In Progress Telerik UI for WinForms versions prior to 2024 Q4 (2024.4.1113), a code execution attack is possible through an insecure deserialization vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Progress Software/Telerik UI for WinFormsv5
Range: 2011.1.315
Telerik/UI For Winuillm-fuzzy
Range: <2024 Q4 (2024.4.1113)
Progress (organisation)/Telerik UI For Winforms
cpe:2.3:a:progress:telerik_ui_for_winforms:*:*:*:*:*:*:*:*
Range: <2024.4.1113

Patches

Vulnerability mechanics

References

docs.telerik.com/devtools/winforms/knowledge-base/unsafe-deserialization-cve-2024-10013nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000