TD
Product
Telegram Desktop
11
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 6Medium 3Low 1
Watch
Add Telegram Desktop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-17613 | 9.8 | Sep 28 | Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol Affected: 1.3.16 |
| CVE-2019-10044 | 8.8 | Mar 25 | Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homograph attack when displaying messages containing… Affected: before 1.5.12 |
| CVE-2026-94488 | 8.2 | Sep 21 | Telegram Desktop before 6.9.4 allows XSS in the HTML exporter Affected: 4.15.1 before 6.9.4 |
| CVE-2026-107181 | 8.1 | Oct 7 | Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme Affected: before 7.2.9 |
| CVE-2020-17448 | 7.8 | Aug 11 | Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a… Affected: through 2.1.13 |
| CVE-2021-47793 | 7.5 | Jan 15 | Telegram Desktop 2.9.2 - Denial of Service (PoC) Affected: 2.9.2 |
| CVE-2018-17231 | 7.5 | Sep 19 | Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of service (assertion failure and application exit) via an "Edit color palette" search that triggers… Affected: 1.3.14 |
| CVE-2020-12474 | 6.5 | May 1 | Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat… Affected: through 2.0.1 |
| CVE-2018-17780 | 6.5 | Sep 29 | Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior… Affected: 1.3.14 |
| CVE-2021-36769 | 5.3 | Jul 17 | A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8 Affected: before 2.8.8 |
| CVE-2020-25824 | 2.4 | Oct 14 | Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard Affected: through 2.4.3 |
Showing 11