PatchTheCVEtelerik vulnerabilities
Recent CVEs affecting telerik products. 7 tracked.
telerik has 7 tracked vulnerabilities, 1 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 7. Most recent: 2024-12-16. Highest priority: CVE-2024-4358 (score 94/100).
- CVE-2024-8316 HIGH 7.8 UPGRADE In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a code execution attack is possible thr
- CVE-2024-7679 HIGH 7.8 UPGRADE In Progress Telerik UI for WinForms versions prior to 2024 Q3 (2024.3.924), a command injection attack is poss
- CVE-2024-7576 HIGH 7.8 UPGRADE In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a code execution attack is possible thr
- CVE-2024-7575 HIGH 7.8 UPGRADE In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible
- CVE-2024-4358 CRITICAL 9.8 EXPLOITED UPGRADE Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability
- CVE-2024-10095 HIGH 8.4 UPGRADE In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible th
- CVE-2024-10012 HIGH 7.8 UPGRADE In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1111), a code execution attack is possible th
FAQ
How do I fix telerik vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is telerik being exploited right now?
Yes: 1 telerik CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which telerik CVE should I patch first?
CVE-2024-4358 currently ranks highest (94/100): Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability.