Progress Telerik UI For Winforms vulnerabilities

3 CVEs affecting Progress Telerik UI For Winforms, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-0332, published 2025-02-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-0332, published 2025-02-12. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. In Progress® Telerik® UI for WinForms, versions prior to 2025 Q1 (2025.1.211), using the improper limitation of a target path can lead to decompressing an archive's content into a restricted…
CVE-2024-10013, published 2024-11-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. In Progress Telerik UI for WinForms versions prior to 2024 Q4 (2024.4.1113), a code execution attack is possible through an insecure deserialization vulnerability.
CVE-2024-3892, published 2024-05-15. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. A local code execution vulnerability is possible in Telerik UI for WinForms beginning in v2021.1.122 but prior to v2024.2.514. This vulnerability could allow an untrusted theme assembly to execute…