Approved changes feed: RSS · Atom

cpe:2.3:a:progress_software:telerik_ui_for_wpf:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorProgress Software (96c4320b-2c72-5331-bd5a-d39d72393793)
ProductTelerik Ui For Wpf (dbca8295-e53a-5954-97df-b922b9bc243a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8316 vulnerable 2026-06-03 14:58:18.119325 Progress UI for WPF format provider unsafe deserialization vulnerability
HIGH (7.8)
In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a code execution attack is possible through an insecure deserialization vulnerability.
Published: 2024-09-25T13:59:20.369Z
Updated: 2024-09-25T14:16:14.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7576 vulnerable 2026-06-03 14:58:06.413272 Progress UI for WPF format provider unsafe deserialization vulnerability
HIGH (7.8)
In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a code execution attack is possible through an insecure deserialization vulnerability.
Published: 2024-09-25T13:57:35.699Z
Updated: 2024-09-25T14:17:24.219Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7575 vulnerable 2026-06-03 14:58:06.412783 Improper neutralization special element in hyperlinks
HIGH (7.8)
In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutralization of hyperlink elements.
Published: 2024-09-25T13:55:59.435Z
Updated: 2024-09-25T14:19:30.019Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10095 vulnerable 2026-06-03 14:54:04.883300 Progress UI for WPF format provider unsafe deserialization vulnerability
HIGH (8.4)
In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an insecure deserialization vulnerability.
Published: 2024-12-16T16:59:25.572Z
Updated: 2024-12-16T17:26:03.808Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10012 vulnerable 2026-06-03 14:54:04.690308 Progress UI for WPF format provider unsafe deserialization vulnerability
HIGH (7.8)
In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1111), a code execution attack is possible through an insecure deserialization vulnerability.
Published: 2024-11-13T15:19:06.329Z
Updated: 2024-11-13T19:34:56.312Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.