Read the docs

Telegram

Records41All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

Telegram records in CISA KEV

No Telegram vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Telegram Messenger · all components

Priority MEDIUM 42

The saveFile method in MediaController.java in the Telegram Messenger application before 2017-12-08 for Android allows directory traversal via a pathname obtained in a file-transfer request from a remote peer, as demonst…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01741 Published 2017-12-16 No fix listed CWE-22
Priority LOW 32

Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01803 Published 2018-09-29 No fix listed CWE-200
Open these records in search →