CVE-2025-0332

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Feb 12, 2025
Updated: Feb 21, 2025
CWE ID 22

Summary

CVE-2025-0332 is a vulnerability affecting the In Progress® Telerik® UI for WinForms software. Versions preceding Q1 2025 (2025.1.211) contain a flaw that permits an attacker to bypass the intended file decompression destination, potentially leading to unauthorized archive content being decompressed into restricted directories. This issue could result in unintended code execution or data exposure. Users are advised to update to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share