Vulnerabilities > Telegram > Telegram > 5.10.0

DATE CVE VULNERABILITY TITLE RISK
2021-02-12 CVE-2021-27205 Cleartext Storage of Sensitive Information vulnerability in Telegram
Telegram before 7.4 (212543) Stable on macOS stores the local copy of self-destructed messages in a sandbox path, leading to sensitive information disclosure.
local
low complexity
telegram CWE-312
2.1
2021-02-12 CVE-2021-27204 Cleartext Storage of Sensitive Information vulnerability in Telegram
Telegram before 7.4 (212543) Stable on macOS stores the local passcode in cleartext, leading to information disclosure.
local
low complexity
telegram CWE-312
2.1
2020-05-01 CVE-2020-12474 Improper Input Validation vulnerability in Telegram
Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat invitation URL.
network
telegram CWE-20
4.3
2020-03-24 CVE-2020-10570 Improper Authentication vulnerability in Telegram
The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrictions on message reading and message replying.
local
low complexity
telegram CWE-287
3.6
2019-09-11 CVE-2019-16248 Unspecified vulnerability in Telegram
The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files from the Telegram Images directory.
local
low complexity
telegram
2.1
2019-08-23 CVE-2019-15514 Information Exposure vulnerability in Telegram 5.10.0
The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Group Info feature, e.g., by adding a significant fraction of a region's assigned phone numbers.
network
low complexity
telegram CWE-200
5.0