High severity7.2NVD Advisory· Published May 15, 2024· Updated Jun 17, 2026

CVE-2024-3892

Description

A local code execution vulnerability is possible in Telerik UI for WinForms beginning in v2021.1.122 but prior to v2024.2.514. This vulnerability could allow an untrusted theme assembly to execute arbitrary code on the local Windows system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Progress (organisation)/Telerik UI For Winforms2 versions
cpe:2.3:a:progress:telerik_ui_for_winforms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:progress:telerik_ui_for_winforms:*:*:*:*:*:*:*:*range: >=2021.1.122,<2024.2.514
- (no CPE)range: v2021.1.122
Telerik/UI For Winuillm-fuzzy
Range: v2021.1.122 to v2024.2.514

Patches

Vulnerability mechanics

References

docs.telerik.com/devtools/winforms/knowledge-base/local-code-execution-vulnerability-cve-2024-3892nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000