PT-2024-28275 · Telerik · Telerik Ui For Winforms

Published 2024-05-15 · Updated 2025-07-03 · CVE-2024-3892

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Telerik UI for WinForms versions 2021.1.122 through 2024.2.514

Description A local code execution issue is possible, allowing an untrusted theme assembly to execute arbitrary code on the local Windows system. This could lead to system compromise.

Recommendations For versions 2021.1.122 through 2024.2.514, upgrade to version 2024.2.514 or later to mitigate the risk of system compromise.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2024-3892

Affected Products

Telerik Ui For Winforms

References · 7

• https://docs.telerik.com/devtools/winforms/knowledge-base/local-code-execution-vulnerability-cve-2024-3892 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-3892 · Security Note
• https://osv.dev/vulnerability/CVE-2024-3892 · Vendor Advisory
• https://t.me/cvenotify/108888 · Telegram Post
• https://twitter.com/oktsec/status/1810556871696076829 · Twitter Post
• https://t.me/cvenotify/127647 · Telegram Post
• https://t.me/cvenotify/79896 · Telegram Post