Поиск уязвимостей
Количество 6
Количество 6
CVE-2026-107181
Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme handler to upload local files, including tdata session keys, to an attacker channel, enabling account takeover.
CVE-2026-107181
Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme handler to upload local files, including tdata session keys, to an attacker channel, enabling account takeover.
CVE-2026-107181
Telegram Desktop before 7.2.9 contains an IPC record-separator injecti ...
GHSA-2h6w-ccjh-5jhr
Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme handler to upload local files, including tdata session keys, to an attacker channel, enabling account takeover.
ALT-PU-2026-18277
ALT-PU-2026-18277: package `ayugram-desktop` update to version 7.2.9-alt1
ALT-PU-2026-18021
ALT-PU-2026-18021: package `telegram-desktop` update to version 7.3.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-107181 Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme handler to upload local files, including tdata session keys, to an attacker channel, enabling account takeover. | CVSS3: 8.1 | 1% Низкий | около 1 месяца назад |
 | CVE-2026-107181 Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme handler to upload local files, including tdata session keys, to an attacker channel, enabling account takeover. | CVSS3: 8.1 | 1% Низкий | около 1 месяца назад |
| CVE-2026-107181 Telegram Desktop before 7.2.9 contains an IPC record-separator injecti ... | CVSS3: 8.1 | 1% Низкий | около 1 месяца назад |
| GHSA-2h6w-ccjh-5jhr Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme handler to upload local files, including tdata session keys, to an attacker channel, enabling account takeover. | CVSS3: 8.1 | 1% Низкий | около 1 месяца назад |
| ALT-PU-2026-18277 ALT-PU-2026-18277: package `ayugram-desktop` update to version 7.2.9-alt1 | CVSS3: 8.1 | 1% Низкий | 26 дней назад |
| ALT-PU-2026-18021 ALT-PU-2026-18021: package `telegram-desktop` update to version 7.3.1-alt1 | CVSS3: 8.2 | 27 дней назад |
Уязвимостей на страницу