Telegram Desktop vulnerabilities

• telegram desktop Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme CVE-2026-107181 Public exploitFix available 8.6 HighOctober 7, 2026
• telegram desktop Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The first fixed stable version is... CVE-2026-94488 Fix available 8.3 HighSeptember 21, 2026
• telegram desktop Telegram Desktop 2.9.2 - Denial of Service (PoC) CVE-2021-47793 4.6 MediumJanuary 15, 2026