Telegram Telegram Desktop
2 CVEs affecting Telegram Telegram Desktop. Latest disclosed: 2026-09-21. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-94488 | High | 8.2 | 2026-09-21 | Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The first fixed stable version is 7.0.1.) This occurs in button.text.toUtf8 in export_output_ht… |
CVE-2021-47793 | High | 7.5 | 2026-01-16 | Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attac… |