PatchTheCVECVE-2024-0832: In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the
CVE-2024-0832 is a high-severity flaw (CVSS 7.8) affecting telerik reporting. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package to elevate their privileges on the underlying operating system.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | High |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.2% (top 91%) |
| CISA exploited list | No |
| Weakness | CWE-269 |
| Published | 2024-01-31 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-0832?
telerik reporting: upgrade to 18.0.24.130. Exact commands for each OS are on this page.
Is CVE-2024-0832 being exploited?
CVE-2024-0832 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-0832 affect?
CVE-2024-0832 affects telerik reporting. Severity is high (CVSS 7.8). In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Reporting install is present, a lower privileged u
How urgent is CVE-2024-0832?
Priority 30/100. High severity
Related CVEs
- CVE-2024-8048 HIGH 7.8 UPGRADE In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible usi
- CVE-2024-8014 HIGH 8.8 UPGRADE In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible thr
- CVE-2024-7840 HIGH 7.8 UPGRADE In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible
- CVE-2024-7294 HIGH 7.5 UPGRADE In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on
- CVE-2024-7293 HIGH 7.5 UPGRADE In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack i