Telegram vulnerabilities

Newest CVEs

• CVE-2026-111105

  Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability

  Telegram · Telegram

  High7.0
• CVE-2026-107181

  Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme

  Telegram · Telegram Desktop

  High8.6
• CVE-2026-94488

  Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The first fixed stable version is 7.0.1.) This occurs in button.text.toUtf8 in…

  Telegram · Telegram Desktop

  High8.3
• CVE-2026-7701

  Telegram Desktop Bot API url_auth_box.cpp RequestButton null pointer dereference

  Telegram · Desktop

  Medium5.3
• CVE-2021-47793

  Telegram Desktop 2.9.2 - Denial of Service (PoC)

  Telegram · Telegram Desktop

  Medium4.6