Skip to content

Progress Software · product

Telerik Document Processing Libraries

9 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

  1. Telerik Document Processing Path TraversalCVE-2024-11343Progress Software · CVSS 8.3 · 0.7% likely

    CWE-22

  2. Telerik Document Processing Improper Handling of Memory ResourcesCVE-2024-8049Progress Software · CVSS 6.5 · 0.4% likely

    CWE-834

  3. Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question AnsweringCVE-2026-118036Progress Software · CVSS 7.5 · 0.4% likely

    CWE-674

  4. Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessingCVE-2026-118035Progress Software · CVSS 7.5 · 0.3% likely

    CWE-674

  5. Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessingCVE-2026-118037Progress Software · CVSS 7.5 · 0.3% likely

    CWE-674

  6. Path Traversal in Telerik Document Processing Libraries AI Agent ToolsCVE-2026-118038Progress Software · CVSS 7.1 · 0.3% likely

    CWE-22

  7. XML External Entity Reference in Telerik Document Processing Libraries SVG Image ProcessingCVE-2026-118039Progress Software · CVSS 7.5 · 0.3% likely

    CWE-611

  8. Infinite Loop in Telerik Document Processing XLS ImportCVE-2026-106164Progress Software · CVSS 7.3 · 0.2% likely

    CWE-835

  9. Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessingCVE-2026-118040Progress Software · CVSS 7.5 · 0.1% likely

    CWE-347

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in