CVE-2026-118035
CVE-2026-118035 · Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient algorithmic complexity and infinite loop vulnerabilities in RadWordsProcessing allow an unauthenticated attacker to terminate or hang the host process via a crafted DOCX, DOC, RTF or HTML document.
CVSS 7.5 · High · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
telerik document processing libraries
- Versions
- ≥ 0, < 2026.3.1027: Affected (custom)
Update to 2026.3.1027