CVE-2024-3892

—

CVSS 3.1

6.7 medium

EPSS

<1%p12

Published

May 15, 2024 (May 15, 2024)

Modified

Jun 17, 2026

Description

A local code execution vulnerability is possible in Telerik UI for WinForms beginning in v2021.1.122 but prior to v2024.2.514. This vulnerability could allow an untrusted theme assembly to execute arbitrary code on the local Windows system.

Vendors: progress
Products: telerik ui for winforms
Weakness: CWE-94
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.