CVE-2024-10012
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2024-10012 is a newly disclosed vulnerability affecting Telerik UI for WPF versions before Q4 2024 (2024.4.1111). This issue grants attackers the ability to execute arbitrary code through insecure deserialization. Insecure deserialization occurs when an application deserializes untrusted data without proper validation, leading to potential code injection and execution. This vulnerability poses a significant risk, as successful exploitation could result in unauthorized system access or data theft. To mitigate this risk, users are advised to update to the latest version of Telerik UI for WPF as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.