A local code execution vulnerability is possible in... · CVE-2024-3892 · GitHub Advisory Database · GitHub

A local code execution vulnerability is possible in...

High severity Unreviewed Published May 15, 2024 to the GitHub Advisory Database • Updated May 15, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A local code execution vulnerability is possible in Telerik UI for WinForms beginning in v2021.1.122 but prior to v2024.2.514. This vulnerability could allow an untrusted theme assembly to execute arbitrary code on the local Windows system.

References

Published by the National Vulnerability Database

May 15, 2024

Published to the GitHub Advisory Database May 15, 2024

Last updated May 15, 2024

Severity

High

7.3

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

High

Privileges required

High

User interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H