CVE-2024-10012 — Progress UI for WPF format provider unsafe deserialization vulnerability

CVE-2024-10012

Progress UI for WPF format provider unsafe deserialization vulnerability PUBLISHED

Description (CNA)

In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1111), a code execution attack is possible through an insecure deserialization vulnerability.

Affected (CNA)

Vendor / product	Versions
Progress Software / Telerik UI for WPF	affected 2011.1.315 before 2024.4.1111

CWE

CWE-502

References

https://docs.telerik.com/devtools/wpf/knowledge-base/kb-security-unsafe-deserialization-cve-2024-10012

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.