Vendor
Telegram
41 known vulnerabilities in products by Telegram, 0 of them actively exploited (CISA KEV).
Key figures
41
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2019-10044 | Telegram: security vulnerability | 8.8 | |
| Critical | CVE-2018-17613 | Telegram Desktop: security vulnerability | 9.8 | |
| High | CVE-2020-17448 | Telegram Desktop: security vulnerability | 7.8 | |
| High | CVE-2017-17715 | Telegram Messenger: Path Traversal | 8.8 | |
| High | CVE-2026-107181 | Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme | 8.1 | |
| Medium | CVE-2020-12474 | Telegram: security vulnerability | 6.5 | |
| High | CVE-2024-7014 | Improper multimedia file attachment validation in Telegram for Android app | 8.1 | |
| Critical | CVE-2021-40532 | Telegram Web K Alpha: security vulnerability | 9.8 | |
| High | CVE-2018-20436 | Telegram: Server-Side Request Forgery (SSRF) | 8.1 | |
| Medium | CVE-2018-17780 | Telegram Desktop: security vulnerability | 6.5 | |
| Medium | CVE-2019-15514 | Telegram: security vulnerability | 5.3 | |
| High | CVE-2018-17231 | Telegram Desktop: Denial of Service | 7.5 | |
| High | CVE-2014-8688 | Telegram Messenger: security vulnerability | 7.5 | |
| High | CVE-2021-31320 | Telegram: Heap-Based Buffer Overflow | 7.1 | |
| High | CVE-2021-31321 | Telegram: Out-of-Bounds Access | 7.1 | |
| Medium | CVE-2021-31322 | Telegram: Heap-Based Buffer Overflow | 5.5 | |
| Medium | CVE-2021-36769 | Telegram: security vulnerability | 5.3 | |
| High | CVE-2026-94488 | Telegram Desktop: Cross-site Scripting | 8.2 | |
| Medium | CVE-2021-31315 | Telegram: Out-of-Bounds Access | 5.5 | |
| Medium | CVE-2021-31317 | Telegram: Out-of-Bounds Access | 5.5 | |
| Medium | CVE-2021-31318 | Telegram: Out-of-Bounds Access | 5.5 | |
| Medium | CVE-2021-31319 | Telegram: Out-of-Bounds Access | 5.5 | |
| Medium | CVE-2021-31323 | Telegram: Heap-Based Buffer Overflow | 5.5 | |
| High | CVE-2021-47793 | Telegram Desktop 2.9.2 - Denial of Service (PoC) | 7.5 | |
| High | CVE-2026-111105 | Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability | 7.0 |
Products
| Telegram | 28 | 0 |
| Telegram Desktop | 12 | 0 |