CVE-2024-3892

MEDIUM 6.7CVE-2024-3892 · Published 15/05/2024 · updated 17/06/2026

In short

CVE-2024-3892 is a MEDIUM (CVSS 6.7) vulnerability affecting telerik ui for winforms (progress).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 12.2% of all vulnerabilities.
Fix: update to 2024.2.514 or later.

Package	Affected versions	Patched versions
telerik ui for winforms progress	`≥ 2021.1.122, < 2024.2.514`	`2024.2.514`

Description

A local code execution vulnerability is possible in Telerik UI for WinForms beginning in v2021.1.122 but prior to v2024.2.514. This vulnerability could allow an untrusted theme assembly to execute arbitrary code on the local Windows system.

References

docs.telerik.com/devtools/winforms/knowledge-base/local-code-execution-vulnerability-cve-2024-3892 · Vendor Advisory

More vulnerabilities in telerik ui for winforms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free