Skip to content
OpenAdvisories

Product · Telegram

Telegram Desktop

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-107181 Public exploit

    Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme

    Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme han…

    Telegram Telegram Desktop telegram-desktop telegram-desktop Debian Ubuntu
  • High 8.2
    CVE-2026-94488

    Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The first fixed stable version is 7.0.1.) This occurs i…

    Telegram Telegram Desktop telegram-desktop Debian
  • High 7.5
    CVE-2021-47793

    Telegram Desktop 2.9.2 - Denial of Service (PoC)

    Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an ap…

    Telegram Telegram Desktop