Skip to content
Telegram Desktop vulnerabilities
-
telegram desktop
Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme
CVE-2026-107181
Public exploitFix available
8.6 High
-
telegram desktop
Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The first fixed stable version is...
CVE-2026-94488
Fix available
8.3 High
-
telegram desktop
Telegram Desktop Bot API url_auth_box.cpp RequestButton null pointer dereference
CVE-2026-7701
Disputed
5.3 Medium
-
telegram desktop
Telegram Desktop 2.9.2 - Denial of Service (PoC)
CVE-2021-47793
4.6 Medium
-
telegram, telegram desktop +1 more
A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS,...
CVE-2021-36769
Fix available
5.3 Medium
-
telegram desktop
Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within...
CVE-2020-25824
2.4 Low
-
telegram desktop
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type...
CVE-2020-17448
Fix available
7.8 High
-
telegram, telegram desktop +1 more
Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1...
CVE-2020-12474
Fix available
6.5 Medium
-
telegram, telegram desktop +1 more
Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and...
CVE-2019-10044
Fix available
8.8 High
-
telegram desktop, messenger +1 more
Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user...
CVE-2018-17780
Fix available
6.5 Medium
-
telegram desktop
Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and...
CVE-2018-17613
9.8 Critical
-
telegram desktop
** DISPUTED ** Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of...
CVE-2018-17231
Disputed
7.5 High