Advisories · Technology

Telegram Desktop.

Every CVE that names Telegram Desktop among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-107181 CVE record

CVSS 8.6 High

Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme
- Telegram Desktop
- CWE-143
Not analysed yet 7 Oct 2026
CVE-2026-94488 CVE record

CVSS 8.3 High

Cross-site scripting in Telegram Desktop
- Telegram Desktop
- Cross-site scripting (XSS)
Not analysed yet 21 Sept 2026
CVE-2026-7701 CVE record

CVSS 5.3 Medium

Telegram Desktop Bot API url_auth_box.cpp RequestButton null pointer dereference
- Telegram Desktop
- Denial of service
- Memory corruption
Not analysed yet 3 May 2026
CVE-2021-47793 CVE record

CVSS 4.6 Medium

Telegram Desktop 2.9.2 - Denial of Service (PoC)
- Telegram Desktop
- Denial of service
Not analysed yet 15 Jan 2026