Sploitus

15 exploited vulnerabilities in Telegram

Vulnerabilities with publicly known exploits

Vendors
Telegram, Unknown, Feishu, Google, Line, Microsoft
With known exploits
15
Affected Facebook Messenger versions
≤ 227.0, 228.1.0.10.116
Affected Telegram versions
= 9.3.1, 9.4

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2019-10044
CVSS 8.8 HIGH 2019-03-25
CVE-2026-28478
CVSS 8.7 HIGH 2026-02-13FIX AVAILABLE
CVE-2018-20436
CVSS 8.1 HIGH 2018-12-24FIX AVAILABLE
CVE-2026-25474
CVSS 7.5 HIGH 2026-02-17FIX AVAILABLE
CVE-2026-28480
CVSS 6.9 MEDIUM 2026-02-14FIX AVAILABLE
CVE-2026-27793
CVSS 6.5 MEDIUM 2026-02-27FIX AVAILABLE
CVE-2020-20093 1 exploit
CVSS 6.5 MEDIUM 2022-03-23FIX AVAILABLE
RTLO Injection URI Spoofing
CVE-2018-17780
CVSS 6.5 MEDIUM 2018-09-29FIX AVAILABLE
CVE-2020-10570
CVSS 6.1 MEDIUM 2020-03-24FIX AVAILABLE
CVE-2021-30496
CVSS 5.7 MEDIUM 2021-04-20FIX AVAILABLE
CVE-2023-26818 1 exploit
CVSS 5.5 MEDIUM 2023-02-03
Exploit for Incorrect Authorization in Telegram
CVE-2021-27205
CVSS 5.5 MEDIUM 2021-02-12FIX AVAILABLE
CVE-2021-27204
CVSS 5.5 MEDIUM 2021-02-12FIX AVAILABLE
CVE-2019-16248
CVSS 5.5 MEDIUM 2019-09-11FIX AVAILABLE
CVE-2019-15514
CVSS 5.3 MEDIUM 2019-08-23