{"advisories":[{"id":"EUVD-2024-33556","source":"euvd","title":"In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an insecure deserialization vulnerability.","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-33556"}],"cve":"CVE-2024-10095","epss":{"score":0.00744},"mitre":{"cpes":[],"created":"2024-12-16T16:59:25.572000+00:00","description":"In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an insecure deserialization vulnerability.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cvssV4_0":{}},"mitre_repo_path":"cves/2024/10xxx/CVE-2024-10095.json","references":["https://docs.telerik.com/devtools/wpf/knowledge-base/kb-security-unsafe-deserialization-vulnerability-cve-2024-10095"],"title":"Progress UI for WPF format provider unsafe deserialization vulnerability","updated":"2024-12-16T17:26:03.808000+00:00","vendors":[],"weaknesses":["CWE-502"]},"nvd":{"cpes":["cpe:2.3:a:telerik:ui_for_wpf:*:*:*:*:*:*:*:*"],"created":"2024-12-16T17:15:06.757000+00:00","description":"In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an insecure deserialization vulnerability.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cvssV4_0":{}},"nvd_repo_path":"2024/CVE-2024-10095.json","references":["https://docs.telerik.com/devtools/wpf/knowledge-base/kb-security-unsafe-deserialization-vulnerability-cve-2024-10095"],"title":null,"updated":"2026-06-17T06:54:54.147000+00:00","vendors":["telerik","telerik$PRODUCT$ui_for_wpf"],"weaknesses":["CWE-502"]},"opencve":{"changes":[{"created":"2024-12-16T17:15:00+00:00","data":[{"details":{"new":"In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an insecure deserialization vulnerability.","old":null},"type":"description"},{"details":{"new":"Progress UI for WPF format provider unsafe deserialization vulnerability","old":null},"type":"title"},{"details":{"added":["CWE-502"],"removed":[]},"type":"weaknesses"},{"details":{"added":["https://docs.telerik.com/devtools/wpf/knowledge-base/kb-security-unsafe-deserialization-vulnerability-cve-2024-10095"],"removed":[]},"type":"references"},{"details":{"added":{"cvssV3_1":{"score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"11248df7-11ea-4fa1-9a33-97e8da9177e3"},{"created":"2024-12-16T18:15:00+00:00","data":[{"details":{"added":{"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"total"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"711b26b1-d068-419a-92b5-6701fcf13c97"},{"created":"2024-12-18T13:15:00+00:00","data":[{"details":["telerik","telerik$PRODUCT$ui_for_wpf"],"type":"first_time"},{"details":{"added":["cpe:2.3:a:telerik:ui_for_wpf:*:*:*:*:*:*:*:*"],"removed":[]},"type":"cpes"},{"details":{"added":["telerik","telerik$PRODUCT$ui_for_wpf"],"removed":[]},"type":"vendors"}],"id":"cad84f09-6c1b-4b86-8e7e-dcf001e4c162"},{"created":"2025-07-12T13:45:00+00:00","data":[{"details":{"added":{},"removed":{},"updated":{"epss":{"new":{"score":0.00236},"old":{"score":0.00197}}}},"type":"metrics"}],"id":"037e8cad-d0b1-449f-bb1f-ac2de99fc184"}],"cpes":{"data":["cpe:2.3:a:telerik:ui_for_wpf:*:*:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2024-12-16T16:59:25.572000+00:00","provider":"mitre"},"description":{"data":"In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an insecure deserialization vulnerability.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"provider":"mitre"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.00744},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"total"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://docs.telerik.com/devtools/wpf/knowledge-base/kb-security-unsafe-deserialization-vulnerability-cve-2024-10095"],"providers":["mitre","nvd"]},"title":{"data":"Progress UI for WPF format provider unsafe deserialization vulnerability","provider":"mitre"},"updated":{"data":"2024-12-18T12:59:51.003000+00:00","provider":"nvd"},"vendors":{"data":["telerik","telerik$PRODUCT$ui_for_wpf"],"providers":["nvd"]},"weaknesses":{"data":["CWE-502"],"providers":["mitre","nvd"]}},"vulnrichment":{"cpes":[],"created":"2024-12-16T16:59:25.572000+00:00","description":"In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an insecure deserialization vulnerability.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"total"},"version":"2.0.3"}},"references":[],"title":"Progress UI for WPF format provider unsafe deserialization vulnerability","updated":"2024-12-16T17:25:59.414000+00:00","vendors":[],"vulnrichment_repo_path":"2024/10xxx/CVE-2024-10095.json","weaknesses":[]}}