CVE-2024-10012

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Nov 13, 2024
CWE ID 502

Summary

CVE-2024-10012 is a newly disclosed vulnerability affecting Telerik UI for WPF versions before Q4 2024 (2024.4.1111). This issue grants attackers the ability to execute arbitrary code through insecure deserialization. Insecure deserialization occurs when an application deserializes untrusted data without proper validation, leading to potential code injection and execution. This vulnerability poses a significant risk, as successful exploitation could result in unauthorized system access or data theft. To mitigate this risk, users are advised to update to the latest version of Telerik UI for WPF as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share