Home/Product/telegram desktop
Product

telegram desktop

10 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2021-47793
all versions
Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an ove
7.5HIGH
CVE-2021-36769
< 2.8.8
A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8.
5.3MEDIUM
CVE-2020-25824
<= 2.4.3
Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard.
2.4LOW
CVE-2020-17448
<= 2.1.13
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as de
7.8HIGH
CVE-2020-12474
<= 2.0.1
Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph atta
6.5MEDIUM
CVE-2019-10044
< 1.5.12
Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homo
8.8HIGH
CVE-2018-17780
all versions
Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses duri
6.5MEDIUM
CVE-2018-17613
all versions
Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext ove
9.8CRITICAL
CVE-2018-17231
all versions
Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of service (assertion failure and application exit)
7.5HIGH
CVE-2016-10351
all versions
Telegram Desktop 0.10.19 uses 0755 permissions for $HOME/.TelegramDesktop, which allows local users to obtain sensitive authentica
5.5MEDIUM
threatengine.sh