Package · Debian

telegram-desktop

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.1

CVE-2026-107181 Public exploit

Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme

Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme han…

Telegram Telegram Desktop telegram-desktop telegram-desktop Debian Ubuntu

Oct 7, 2026
High 8.2

CVE-2026-94488

Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The first fixed stable version is 7.0.1.) This occurs i…

Telegram Telegram Desktop telegram-desktop Debian

Sep 21, 2026