Skip to content
OpenAdvisories

Package · Debian

telegram-desktop

12 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-107181 Public exploit

    Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme

    Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme han…