Telegram

Telegram

28 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2020-10570

  • EPSS 0.07%
  • Veröffentlicht 24.03.2020 14:15:12
  • Zuletzt bearbeitet 21.11.2024 04:55:36

The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrictions on message reading and message replying. This might be interpreted as a bypass of the passcode f...

5.5

CVE-2019-16248

Exploit
  • EPSS 0.07%
  • Veröffentlicht 11.09.2019 23:15:14
  • Zuletzt bearbeitet 21.11.2024 04:30:22

The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files from the Telegram Images directory. In other words, there is a potentially misleading UI indication that a sender can remove a recipient's copy of a previo...

5.3

CVE-2019-15514

Exploit
  • EPSS 3.33%
  • Veröffentlicht 23.08.2019 13:15:11
  • Zuletzt bearbeitet 21.11.2024 04:28:54

The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Group Info feature, e.g., by adding a significant fract...

8.8

CVE-2019-10044

Exploit
  • EPSS 0.76%
  • Veröffentlicht 25.03.2019 20:29:00
  • Zuletzt bearbeitet 21.11.2024 04:18:16

Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homograph attack when displaying messages containing URLs. This occurs because the application produces a clickable link eve...

5.5

CVE-2018-3986

Exploit
  • EPSS 0.16%
  • Veröffentlicht 03.01.2019 22:29:00
  • Zuletzt bearbeitet 21.11.2024 04:06:26

An exploitable information disclosure vulnerability exists in the "Secret Chats" functionality of the Telegram Android messaging application version 4.9.0. The "Secret Chats" functionality allows a user to delete all traces of a chat, either by using...

8.1

CVE-2018-20436

Exploit
  • EPSS 0.48%
  • Veröffentlicht 24.12.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 04:01:28

The "secret chat" feature in Telegram 4.9.1 for Android has a "side channel" in which Telegram servers send GET requests for URLs typed while composing a chat message, before that chat message is sent. There are also GET requests to other URLs on the...

6.4

CVE-2018-15542

  • EPSS 0.05%
  • Veröffentlicht 09.10.2018 17:29:01
  • Zuletzt bearbeitet 21.11.2024 03:51:02

An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could au...

6.8

CVE-2018-15543

  • EPSS 0.06%
  • Veröffentlicht 09.10.2018 17:29:01
  • Zuletzt bearbeitet 21.11.2024 03:51:02

An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The FingerprintManager class for Biometric validation allows authentication bypass through the callback method from onAuthenticationFailed to onAuthenticationSuccee...