CVE-2024-3892CWE-94

Local code execution vulnerability in Telerik UI for WinForms

High · published May 15, 2024

CVSS v3.1
7.2
EPSS
0%
Percentile
11.5
In the wild
Unconfirmed
What it is

A local code execution vulnerability is possible in Telerik UI for WinForms beginning in v2021.1.122 but prior to v2024.2.514. This vulnerability could allow an untrusted theme assembly to execute arbitrary code on the local Windows system.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00217 · 11.5th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2024-05-15T16:43Z
EPSS history
Timeline
  • 15 MAY 16:43Z
    Local code execution vulnerability in Telerik UI for WinForms
    cvelistv5