Skip to content
Telegram vulnerabilities
Newest
-
telegram
Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability
CVE-2026-111105
7.0 High
-
telegram desktop
Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme
CVE-2026-107181
Public exploit
8.6 High
-
telegram desktop
Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The first fixed stable version is...
CVE-2026-94488
8.3 High
-
telegram desktop
Telegram Desktop Bot API url_auth_box.cpp RequestButton null pointer dereference
CVE-2026-7701
Disputed
5.3 Medium
-
telegram desktop
Telegram Desktop 2.9.2 - Denial of Service (PoC)
CVE-2021-47793
4.6 Medium
-
android telegram for android, telegram +1 more
Improper multimedia file attachment validation in Telegram for Android app
CVE-2024-7014
Public exploit
7.1 High
-
telegram
Telegram v9.6.3 on iOS allows attackers to hide critical information on the User Interface via...
CVE-2023-34658
5.3 Medium
-
telegram
Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone ,or video...
CVE-2023-26818
Public exploit
5.5 Medium
-
telegram
** DISPUTED ** Telegram Web 15.3.1 allows XSS via a certain payload derived from a Target...
CVE-2022-43363
Disputed
6.1 Medium
-
telegram
The Telegram application 7.5.0 through 7.8.0 for Android does not properly implement image self...
CVE-2021-41861
3.3 Low
-
telegram web k alpha
Telegram Web K Alpha before 0.7.2 mishandles the characters in a document extension.
CVE-2021-40532
9.8 Critical
-
telegram web k alpha
Telegram Web K Alpha 0.6.1 allows XSS via a document name.
CVE-2021-37596
6.1 Medium
-
telegram, telegram desktop +1 more
A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS,...
CVE-2021-36769
Fix available
5.3 Medium
-
telegram
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a...
CVE-2021-31315
Fix available
5.5 Medium
-
telegram
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type...
CVE-2021-31317
Fix available
5.5 Medium
-
telegram
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type...
CVE-2021-31318
Fix available
5.5 Medium
-
telegram
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by an...
CVE-2021-31319
Fix available
5.5 Medium
-
telegram
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap...
CVE-2021-31320
Fix available
7.1 High
-
telegram
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a...
CVE-2021-31321
Fix available
7.1 High
-
telegram
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap...
CVE-2021-31322
Fix available
5.5 Medium
-
telegram
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap...
CVE-2021-31323
5.5 Medium
-
telegram
The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service ...
CVE-2021-30496
Disputed
5.7 Medium
-
telegram
The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through...
CVE-2021-27351
Fix available
5.3 Medium
-
telegram
Telegram before 7.4 (212543) Stable on macOS stores the local passcode in cleartext, leading to...
CVE-2021-27204
5.5 Medium
-
telegram
Telegram before 7.4 (212543) Stable on macOS stores the local copy of self-destructed messages in...
CVE-2021-27205
5.5 Medium
-
telegram desktop
Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within...
CVE-2020-25824
2.4 Low
-
telegram desktop
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type...
CVE-2020-17448
Fix available
7.8 High
-
telegram, telegram desktop +1 more
Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1...
CVE-2020-12474
Fix available
6.5 Medium
-
telegram
The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow...
CVE-2020-10570
6.1 Medium
-
telegram
The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files...
CVE-2019-16248
5.5 Medium
-
telegram
The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an...
CVE-2019-15514
Public exploit
5.3 Medium
-
telegram, telegram desktop +1 more
Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and...
CVE-2019-10044
Fix available
8.8 High
-
telegram
An exploitable information disclosure vulnerability exists in the "Secret Chats" functionality of...
CVE-2018-3986
4.2 Medium
-
telegram, telegram web +1 more
** DISPUTED ** The "secret chat" feature in Telegram 4.9.1 for Android has a "side channel" in...
CVE-2018-20436
Disputed
8.1 High
-
telegram
** DISPUTED ** An issue was discovered in the org.telegram.messenger application 4.8.11 for...
CVE-2018-15543
Disputed
6.8 Medium
-
telegram
** DISPUTED ** An issue was discovered in the org.telegram.messenger application 4.8.11 for...
CVE-2018-15542
Disputed
6.4 Medium
-
telegram desktop, messenger +1 more
Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user...
CVE-2018-17780
Fix available
6.5 Medium
-
telegram desktop
Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and...
CVE-2018-17613
9.8 Critical
-
telegram desktop
** DISPUTED ** Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of...
CVE-2018-17231
Disputed
7.5 High
-
telegram messenger
The saveFile method in MediaController.java in the Telegram Messenger application before 2017-12...
CVE-2017-17715
8.8 High
-
telegram messenger
An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Secret chat...
CVE-2014-8688
7.5 High