Telegram

Products

Exploited and recent CVEs

• CVE-2026-111105 High 7.0 Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability 0.2%
• CVE-2026-107181 High 8.1 Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme 0.6%
• CVE-2026-94488 High 8.2 Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The first fixed stable version is 7.0.1.) This occurs in button.text.toUtf8 in export_output_html.cpp. Exploitation cannot occur unless 0.1%
• CVE-2026-7701 Medium 4.3 Telegram Desktop Bot API url_auth_box.cpp RequestButton null pointer dereference 0.4%
• CVE-2021-47793 High 7.5 Telegram Desktop 2.9.2 - Denial of Service (PoC) 0.5%