Skip to content
OpenAdvisories

Vendor

Telegram

5 known vulnerabilities.

Products

Telegram Desktop 3 Telegram 1 Desktop 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.0
    CVE-2026-111105

    Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability

    Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Telegram. User interaction is required to exploit this vulnerability in that the target …

    Telegram Telegram rlottie Ubuntu
  • High 8.1
    CVE-2026-107181 Public exploit

    Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme

    Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme han…

    Telegram Telegram Desktop telegram-desktop telegram-desktop Debian Ubuntu
  • High 8.2
    CVE-2026-94488

    Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The first fixed stable version is 7.0.1.) This occurs i…

    Telegram Telegram Desktop telegram-desktop Debian
  • High 7.5
    CVE-2021-47793

    Telegram Desktop 2.9.2 - Denial of Service (PoC)

    Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an ap…

    Telegram Telegram Desktop