PT-2024-38430

CVE-2024-7576

·

Published

2024-09-25

·

Updated

2024-10-03

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924)
Description A code execution attack is possible through an insecure deserialization vulnerability, allowing for potential code execution risks.
Recommendations For versions prior to 2024 Q3 (2024.3.924), update to version 2024 Q3 (2024.3.924) or later to resolve the issue. As a temporary workaround, consider restricting deserialization operations to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-502: Deserialization of Untrusted Data
Related identifiers
CVE-2024-7576
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com