VYPR

Telerik UI For Winforms

by Progress (organisation)

CVEs (4)

  • CVE-2025-0332HigFeb 12, 2025
    risk 0.51cvss 7.8epss 0.00

    In Progress® Telerik® UI for WinForms, versions prior to 2025 Q1 (2025.1.211), using the improper limitation of a target path can lead to decompressing an archive's content into a restricted directory.

  • CVE-2024-12251HigFeb 12, 2025
    risk 0.51cvss 7.8epss 0.01

    In Progress Telerik UI for WinUI versions prior to 2025 Q1 (3.0.0), a command injection attack is possible through improper neutralization of hyperlink elements.

  • CVE-2024-10013HigNov 13, 2024
    risk 0.51cvss 7.8epss 0.00

    In Progress Telerik UI for WinForms versions prior to 2024 Q4 (2024.4.1113), a code execution attack is possible through an insecure deserialization vulnerability.

  • CVE-2024-3892HigMay 15, 2024
    risk 0.47cvss 7.2epss 0.00

    A local code execution vulnerability is possible in Telerik UI for WinForms beginning in v2021.1.122 but prior to v2024.2.514. This vulnerability could allow an untrusted theme assembly to execute arbitrary code on the local Windows system.