CVE Catalog

CVE-2023-26818

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.52%

40th percentile - higher than 40% of all known CVEs

Summary

Vulnerability in Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone, or video recording via the DYLD_INSERT_LIBRARIES flag.

Risk Assessment

Attackers can exploit this flaw to gain unauthorized access to sensitive data and peripheral devices, posing a serious threat to user privacy.

Recommendation

It is recommended to immediately update Telegram to the latest version that fixes this vulnerability.

Original NVD description (English source)

Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone ,or video recording via the DYLD_INSERT_LIBRARIES flag.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS