88290 matches found
CVE-2021-27351
The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session...
CVE-2021-27204
Telegram before 7.4 212543 Stable on macOS stores the local passcode in cleartext, leading to information disclosure...
CVE-2021-30496
The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service application crash if the victim pastes an attacker-supplied message e.g., in the Persian language into a channel or group. The crash occurs in MtProtoKitFramework. NOTE: the vendor's perspective is that...
CVE-2021-37596
Telegram Web K Alpha 0.6.1 allows XSS via a document name...
CVE-2022-32790
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17353...
CVE-2022-32787
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17352...
RHSA-2024:4716
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17351...
RHSA-2024:4457
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17351...
RHSA-2024:5444
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17351...
RHSA-2024:4910
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17351...
RHSA-2024:4955
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17351...
CVE-2019-6540
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17350...
CVE-2019-6538
creationtimestamp| type| source ---|---|--- 2025-05-22 19:45:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17347...
CVE-2021-36769
A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacker can cause the server to receive messages in a different order than they were sent a client...
CVE-2020-25824
Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntarily opened Export Wizard but is then distracted. An attacker then approaches the unattended desktop and pushes the Export...
CVE-2024-48850
creationtimestamp| type| source ---|---|--- 2025-05-22 17:43:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17340...
GHSA-C49J-QVP9-VGG6
creationtimestamp| type| source ---|---|--- 2025-05-22 17:43:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17338...
GHSA-45JJ-R48J-75PP
creationtimestamp| type| source ---|---|--- 2025-05-22 17:43:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17334...