CVE-2024-3892

CVSS V2 None CVSS V3 None

Description

A local code execution vulnerability is possible in Telerik UI for WinForms beginning in v2021.1.122 but prior to v2024.2.514. This vulnerability could allow an untrusted theme assembly to execute arbitrary code on the local Windows system.

Overview

CVE ID
CVE-2024-3892

Assigner
ProgressSoftware

Vulnerability Status
PUBLISHED

Published Version
2024-05-15T16:43:36.426Z

Last Modified Date
2024-06-04T17:32:00.740Z

Weakness Enumerations

CWE	URL
CWE-94	http://cwe.mitre.org/data/definitions/94.html

References

Reference URL	Reference Tags
https://docs.telerik.com/devtools/winforms/knowledge-base/local-code-execution-vulnerability-cve-2024-3892	vendor-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-3892
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3892

History

Created	Old Value	New Value	Data Type	Notes
2024-06-23 23:50:37				Added to TrackCVE