TE
Product
Telegram
28
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 6Medium 21Low 1
Watch
Add Telegram to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-15543 | 6.8 | Oct 9 | An issue was discovered in the org.telegram.messenger application 4.8.11 for Android Affected: 4.8.11 |
| CVE-2020-12474 | 6.5 | May 1 | Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat… Affected: through 6.0.1; through 6.0.1 |
| CVE-2018-15542 | 6.4 | Oct 9 | An issue was discovered in the org.telegram.messenger application 4.8.11 for Android Affected: 4.8.11 |
| CVE-2022-43363 | 6.1 | Dec 6 | Telegram Web 15.3.1 allows XSS via a certain payload derived from a Target Corporation website Affected: 15.3.1 |
| CVE-2020-10570 | 6.1 | Mar 24 | The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrictions on message reading and… Affected: through 5.12.0 |
| CVE-2021-30496 | 5.7 | Apr 20 | The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service (application crash) if the victim pastes an attacker-supplied message (e.g., in the… Affected: 7.6.2 |
| CVE-2023-26818 | 5.5 | May 19 | Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone ,or video recording via the DYLD_INSERT_LIBRARIES flag Affected: 9.3.1; 9.4 |
| CVE-2021-31323 | 5.5 | May 18 | Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LottieParserImpl::parseDashProperty function of their… Affected: before 7.1.0; before 7.1.0; before 7.1.0 |
| CVE-2021-31322 | 5.5 | May 18 | Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LOTGradient::populate function of their custom fork of the… Affected: before 7.1.0; before 7.1.0; before 7.1.0 |
| CVE-2021-31319 | 5.5 | May 18 | Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by an Integer Overflow in the LOTGradient::populate function of their custom fork of the… Affected: before 7.1.0; before 7.1.0; before 7.1.0 |
| CVE-2021-31318 | 5.5 | May 18 | Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type Confusion in the LOTCompLayerItem::LOTCompLayerItem function of their custom fork… Affected: before 7.1.0; before 7.1.0; before 7.1.0 |
| CVE-2021-31317 | 5.5 | May 18 | Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type Confusion in the VDasher constructor of their custom fork of the rlottie library Affected: before 7.1.0; before 7.1.0; before 7.1.0 |
| CVE-2021-31315 | 5.5 | May 18 | Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the blit function of their custom fork of the rlottie library Affected: before 7.1.0; before 7.1.0; before 7.1.0 |
| CVE-2021-27205 | 5.5 | Feb 12 | Telegram before 7.4 (212543) Stable on macOS stores the local copy of self-destructed messages in a sandbox path, leading to sensitive information disclosure Affected: before 7.4.0 |
| CVE-2021-27204 | 5.5 | Feb 12 | Telegram before 7.4 (212543) Stable on macOS stores the local passcode in cleartext, leading to information disclosure Affected: before 7.4.0 |
| CVE-2019-16248 | 5.5 | Sep 11 | The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files from the Telegram Images directory Affected: before 5.11.0 |
| CVE-2018-3986 | 5.5 | Jan 3 | An exploitable information disclosure vulnerability exists in the "Secret Chats" functionality of the Telegram Android messaging application version 4.9.0 Affected: 4.9.0 |
| CVE-2023-34658 | 5.3 | Jun 29 | Telegram v9.6.3 on iOS allows attackers to hide critical information on the User Interface via calling the function SFSafariViewController Affected: 9.6.3 |
| CVE-2021-36769 | 5.3 | Jul 17 | A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8 Affected: before 7.8.1; before 7.8.3 |
| CVE-2021-27351 | 5.3 | Feb 19 | The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session Affected: through 2.4.7; through 2.4.7; through 7.2.1 |
| CVE-2019-15514 | 5.3 | Aug 23 | The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these… Affected: 5.10.0; 5.10.0 |
Showing 21