CVE-2021-27204

PoC —

CVSS 3.1

5.5 medium

EPSS

<1%p22

Published

Feb 12, 2021 (Feb 12, 2021)

Modified

Jun 17, 2026

Description

Telegram before 7.4 (212543) Stable on macOS stores the local passcode in cleartext, leading to information disclosure.

Vendors: telegram
Products: telegram
Weakness: CWE-312
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news1 stories

The "P" in Telegram stands for Privacy

Security AffairsFeb 12, 10:45 UTC · Feb 12, 2021Exploit / PoC CVE-2021-27204 CVE-2021-27205

50