Telerik UI for WinForms vulnerabilities

6 known vulnerabilities in Telerik UI for WinForms from Progress Software. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Telerik UI for WinForms: URL Redirection to Untrusted Site

  CVE-2026-124700Nov 12, 2026Progress Software

  In Telerik UI for WinForms, versions prior to 2026.4.1111, an untrusted URL redirection vulnerability exists that allows an attacker to launch arbitrary operating system protocol handlers with attacker-controlled arguments via crafted documents and hyperlinks

• 7.8 High severity

  Telerik UI for WinForms: Deserialization of Untrusted Data

  CVE-2026-124701Nov 12, 2026Progress Software

  In Telerik UI for WinForms, versions prior to 2026.4.1111, a deserialization of untrusted data vulnerability exists that allows an attacker to perform unauthorized actions in the context of the affected application.

• 7.8 High severity

  Telerik UI for WinForms: Improper Control of Generation of Code

  CVE-2026-124699Nov 12, 2026Progress Software

  In Telerik UI for WinForms, versions prior to 2026.4.1111, an improper control of code generation vulnerability exists that allows an attacker to supply a crafted expression and execute unauthorized code in the context of the affected application.

• 9.8 Critical severity

  Progress® Telerik® UI for WinForms: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-0332Feb 12, 2025Progress Software

  In Progress® Telerik® UI for WinForms, versions prior to 2025 Q1 (2025.1.211), using the improper limitation of a target path can lead to decompressing an archive's content into a restricted directory.

• 7.8 High severity

  Telerik UI for WinForms: Deserialization of Untrusted Data

  CVE-2024-10013Nov 13, 2024Progress Software

  In Progress Telerik UI for WinForms versions prior to 2024 Q4 (2024.4.1113), a code execution attack is possible through an insecure deserialization vulnerability.

• 7.8 High severity

  Telerik UI for WinForms: Improper Neutralization of Special Elements used in a Command

  CVE-2024-7679Sep 25, 2024Progress Software

  In Progress Telerik UI for WinForms versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutralization of hyperlink elements.