📦

telegram_messenger

Vendor: telegram

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 19 Total Indexed
Avg. EPSS 1.76% Exploit Prob.
Latest CVE CVE-2018-17780 Sep 29

Security Vulnerability Index

Page 1 / 2
6.5 CVSS
CVE-2018-17780

Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list.

EPSS: 1.78%
8.8 CVSS
CVE-2017-17715

The saveFile method in MediaController.java in the Telegram Messenger application before 2017-12-08 for Android allows directory traversal via a pathname obtained in a file-transfer request from a remote peer, as demonstrated by writing to tgnet.dat or tgnet.dat.bak.

EPSS: 1.74%