Telerik UI for WPF Untrusted URL Redirection

Executive Summary

This vulnerability in Telerik UI for WPF before 2026.4.1110 allows an attacker to redirect users to malicious URLs via crafted documents or hyperlinks. The attacker can exploit non-allowlisted URI schemes to launch arbitrary operating system protocol handlers with attacker-controlled arguments when the user opens them.

Useful 0 Not Useful 0

Impact Analysis

An attacker could trick you into opening a malicious document or link, leading to unauthorized actions on your system. This may result in data theft, malware installation, or further network compromise depending on the attacker's goals.

Useful 0 Not Useful 0

Mitigation Strategies

Update Telerik UI for WPF to version 2026.4.1110 or later to address the vulnerability.

Useful 0 Not Useful 0