Telegram Desktop security vulnerabilities

Telegram Desktop is the desktop version of Telegram’s open-source instant messaging application. Version 2.9.2 of Telegram Desktop contains a security vulnerability that arises from sending extremely large message payloads, which may lead to denial-of-service attacks...

CVE-2021-47793 Telegram Desktop 2.9.2 - Denial of Service (PoC)

Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash...

CVE-2021-47793

Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash...

CVE-2021-47793

Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash...

CVE-2021-47793 Telegram Desktop 2.9.2 - Denial of Service (PoC)

Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash...

CVE-2021-47793

Telegram Desktop 2.9.2 is affected by a Denial of Service vulnerability. An attacker can crash the app by pasting an oversized message payload (a 9,000,000‑byte buffer) into the messaging interface. The vulnerability is cited as CVE-2021-47793. Connected sources indicate PoC availability (e.g., E...

CVE-2021-47793

Removed by vendor...

CVE-2025-11542

creationtimestamp| type| source ---|---|--- 2026-01-15 21:08:24+00:00| seen| Telegram/NE59mjDRaTU1WNL-RGuMz6OQXrG-ZO0A1EnYYl1JAITy6w...

CVE-2025-34414

creationtimestamp| type| source ---|---|--- 2026-01-15 21:08:20+00:00| seen| Telegram/pFQxzC0HcGfQDDozTmsk7R-twPB5SKoRgE9d8sDqRJYZzg...

CVE-2025-62003

creationtimestamp| type| source ---|---|--- 2026-01-15 21:08:20+00:00| seen| Telegram/pFQxzC0HcGfQDDozTmsk7R-twPB5SKoRgE9d8sDqRJYZzg...

CVE-2025-62004

creationtimestamp| type| source ---|---|--- 2026-01-15 21:08:20+00:00| seen| Telegram/pFQxzC0HcGfQDDozTmsk7R-twPB5SKoRgE9d8sDqRJYZzg...

RHSA-2026:0326

creationtimestamp| type| source ---|---|--- 2026-01-15 20:06:55+00:00| seen| Telegram/dLgJVefg1XjzNqXEOW49B9W4A1az5TNKbmBU0FsEJpyA...

RHSA-2026:0332

creationtimestamp| type| source ---|---|--- 2026-01-15 20:06:55+00:00| seen| Telegram/dLgJVefg1XjzNqXEOW49B9W4A1az5TNKbmBU0FsEJpyA...

RHSA-2026:0700

creationtimestamp| type| source ---|---|--- 2026-01-15 14:02:12+00:00| seen| Telegram/R693LAplLRYRq5QcrP4R33XKFkly-VLLCvln7DPho5PnnI...

RHSA-2026:0705

creationtimestamp| type| source ---|---|--- 2026-01-15 14:02:12+00:00| seen| Telegram/R693LAplLRYRq5QcrP4R33XKFkly-VLLCvln7DPho5PnnI...

PT-2026-3165

Name of the Vulnerable Software and Affected Versions Telegram Desktop version 2.9.2 Description Telegram Desktop version 2.9.2 is subject to a denial of service condition. An attacker can cause the application to crash by sending an oversized message payload. Specifically, a 9 million byte buffe...

Telegram to Add Warning for Proxy Links After IP Leak Concerns

Telegram will add a warning for proxy links after reports showed they can expose user IP addresses with a single click, bypassing VPN or privacy settings...

Malicious Chrome Extension Steals MEXC API Keys by Masquerading as Trading Tool

Cybersecurity researchers have disclosed details of a malicious Google Chrome extension that's capable of stealing API keys associated with MEXC, a centralized cryptocurrency exchange CEX available in over 170 countries, while masquerading as a tool to automate trading on the platform. The...

CVE-2025-9427

creationtimestamp| type| source ---|---|--- 2026-01-13 15:07:45+00:00| seen| Telegram/2dyje9VXVL0TxNuZzCcLa8WBb2Moisw5oeL8qVb5nlgGcZc...

Q4 2025 Malware Trends: Telegram Backdoor, Banking Trojans Surge, Joker Returns to Google Play

Telegram mods spread a powerful Android backdoor as banking trojans surge and Joker malware resurfaces on Google Play in Q4 2025, says Doctor Web...