Vulnerabilities > Telegram > Telegram Desktop > High

DATE CVE VULNERABILITY TITLE RISK
2020-08-11 CVE-2020-17448 Incorrect Authorization vulnerability in Telegram Desktop
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension.
local
low complexity
telegram CWE-863
7.8
2019-03-25 CVE-2019-10044 Unspecified vulnerability in Telegram and Telegram Desktop
Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homograph attack when displaying messages containing URLs.
network
low complexity
telegram
8.8
2018-09-19 CVE-2018-17231 Reachable Assertion vulnerability in Telegram Desktop 1.3.14
Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of service (assertion failure and application exit) via an "Edit color palette" search that triggers an "index out of range" condition.
network
low complexity
telegram CWE-617
7.5