CVE-2019-10044 - CVE House
Back to Database
Status published High CVE-2019-10044

Telegram Desktop before 1.5.12 on Windows, and the Telegram applications...

Vulnerability Description

Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homograph attack when displaying messages containing URLs. This occurs because the application produces a clickable link even if (for example) Latin and Cyrillic characters exist in the same domain name, and the available font has an identical representation of characters from different alphabets.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-10044

Credits & Attribution

No credits recorded in the NVD database.

References

More from telegram

View All →
CVE-2022-43363
Telegram Web 15.3.1 allows XSS via a certain payload derived...
Medium 6.1
CVE-2021-41861
The Telegram application 7.5.0 through 7.8.0 for Android does not...
Low 3.3
CVE-2021-40532
Telegram Web K Alpha before 0.7.2 mishandles the characters in...
Critical 9.8
CVE-2021-37596
Telegram Web K Alpha 0.6.1 allows XSS via a document...
Medium 6.1
CVE-2021-36769
A reordering issue exists in Telegram before 7.8.1 for Android,...
Medium 5.3

Affected Vendor

Affected Software

telegram, telegram desktop
Vulnerable Versions:
0

Timeline

Official Publish: March 25th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.