Browse CVEs

HIGH 7.5 CVE-2021-47793 Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payl… Telegram Desktop No fix yet Fix from $1,9502026-01-16 HIGH 8.1 CVE-2024-7014 EvilVideo vulnerability allows sending malicious apps disguised as videos in Telegram for Android application affecting versions 10.14.4 and older. Telegram 10.14.5+ Fix from $1,9502024-07-23 MEDIUM 5.3 CVE-2023-34658 Telegram v9.6.3 on iOS allows attackers to hide critical information on the User Interface via calling the function SFSafariViewController. Telegram No fix yet Fix from $1,6002023-06-29 MEDIUM 5.5 CVE-2023-26818 Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone ,or video recording via the DYLD_INSERT_LIBRARIES flag. Telegram No fix yet Fix from $1,6002023-05-19 MEDIUM 6.1 CVE-2022-43363 Telegram Web 15.3.1 allows XSS via a certain payload derived from a Target Corporation website. NOTE: some third parties have been unable to discern … Telegram No fix yet Fix from $1,6002022-12-06 CRITICAL 9.8 CVE-2021-40532 Telegram Web K Alpha before 0.7.2 mishandles the characters in a document extension. Web K Alpha 0.7.2+ Fix from $2,3002021-09-06 MEDIUM 6.1 CVE-2021-37596 Telegram Web K Alpha 0.6.1 allows XSS via a document name. Web K Alpha Patch available Fix from $1,6002021-07-30 MEDIUM 5.3 CVE-2021-36769 A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacker can cau… Telegram 2.8.8 / 7.8.1+ Fix from $1,6002021-07-17 HIGH 7.1 CVE-2021-31320 Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the VGradientCache::generateGrad… Telegram 7.1.0+ Fix from $1,9502021-05-18 HIGH 7.1 CVE-2021-31321 Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the gray_split_cubic function of… Telegram 7.1.0+ Fix from $1,9502021-05-18 MEDIUM 5.5 CVE-2021-31315 Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the blit function of their custo… Telegram 7.1.0+ Fix from $1,6002021-05-18 MEDIUM 5.5 CVE-2021-31317 Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type Confusion in the VDasher constructor of their custo… Telegram 7.1.0+ Fix from $1,6002021-05-18 MEDIUM 5.5 CVE-2021-31318 Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type Confusion in the LOTCompLayerItem::LOTCompLayerItem… Telegram 7.1.0+ Fix from $1,6002021-05-18 MEDIUM 5.5 CVE-2021-31319 Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by an Integer Overflow in the LOTGradient::populate function … Telegram 7.1.0+ Fix from $1,6002021-05-18 MEDIUM 5.5 CVE-2021-31322 Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LOTGradient::populate functi… Telegram 7.1.0+ Fix from $1,6002021-05-18 MEDIUM 5.5 CVE-2021-31323 Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LottieParserImpl::parseDashP… Telegram 7.1.0+ Fix from $1,6002021-05-18 MEDIUM 5.7 CVE-2021-30496 The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service (application crash) if the victim pastes an attacker-su… Telegram No fix yet Fix from $1,6002021-04-20 MEDIUM 5.3 CVE-2021-27351 The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a re… Telegram after 7.2.1 Fix from $1,6002021-02-19 MEDIUM 5.5 CVE-2021-27204 Telegram before 7.4 (212543) Stable on macOS stores the local passcode in cleartext, leading to information disclosure. Telegram 7.4.0+ Fix from $1,6002021-02-12 MEDIUM 5.5 CVE-2021-27205 Telegram before 7.4 (212543) Stable on macOS stores the local copy of self-destructed messages in a sandbox path, leading to sensitive information di… Telegram 7.4.0+ Fix from $1,6002021-02-12 HIGH 7.8 CVE-2020-17448 Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use o… Telegram Desktop after 2.1.13 Fix from $1,9502020-08-11 MEDIUM 6.5 CVE-2020-12474 Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in … Telegram after 6.0.1 Fix from $1,6002020-05-01 MEDIUM 6.1 CVE-2020-10570 The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrict… Telegram after 5.12.0 Fix from $1,6002020-03-24 MEDIUM 5.5 CVE-2019-16248 The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files from the Telegram Images directory. In other words, th… Telegram 5.11.0+ Fix from $1,6002019-09-11 MEDIUM 5.3 CVE-2019-15514 The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, bec… Telegram No fix yet Fix from $1,6002019-08-23 HIGH 8.8 CVE-2019-10044 Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homograph attack when d… Telegram 1.5.12+ Fix from $1,9502019-03-25 MEDIUM 5.5 CVE-2018-3986 An exploitable information disclosure vulnerability exists in the "Secret Chats" functionality of the Telegram Android messaging application version … Telegram No fix yet Fix from $1,6002019-01-03 HIGH 8.1 CVE-2018-20436 The "secret chat" feature in Telegram 4.9.1 for Android has a "side channel" in which Telegram servers send GET requests for URLs typed while composi… Telegram No fix yet Fix from $1,9502018-12-24 MEDIUM 6.8 CVE-2018-15543 An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The FingerprintManager class for Biometric validation allows au… Telegram Mitigation only Fix from $1,6002018-10-09 MEDIUM 6.4 CVE-2018-15542 An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The Passcode feature allows authentication bypass via runtime m… Telegram Mitigation only Fix from $1,6002018-10-09