Telegram for Android flaw ran code after a voice call was answered
Versions 8.6.2 through 12.10.3 were affected; 12.10.4, released in late September, fixes MediaState handling, and no CVE was assigned as of October 29.
68
Vendor
Telegram
- Mentions · 7d2
- Mentions · 30d6
- All mentions11
- First seenAug 13, 2026
- Last mentioned1d ago
Timeline
11 articles · newest firstResearcher claims new zero-click Telegram sticker bugs can run code on iOS
Aziz says logic flaws bypass server checks Telegram cited against rlottie bug CVE-2026-111105; no public proof or patch.
64
Here’s What Telegram Giving Data to the U.S. Government Looks Like
Court records show Telegram gave U.S. investigators a user's phone number, ID, and IP address.
48
ZDI-26-757: (0Day) Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability
ZDI discloses a user-interaction Telegram rlottie RCE tracked as CVE-2026-111105.
58
Telegram Desktop: one-click account takeover via IPC injection
Telegram Desktop through 7.2.8 let a clicked link steal local login files.
66
PoC Released for Telegram Desktop Flaw Enabling One-Click File Account Takeover
Public PoC shows Telegram Desktop before 7.2.9 can leak local files and sessions via a crafted link.
64
Handala Hack Uses CRUDEEXCLUDE to Disable Defender Protections and Deploy HEAVYGRAM
Group-IB links new HEAVYGRAM and CRUDEEXCLUDE malware to Iran-aligned Handala Hack (MOIS/Void Manticore), which spies on Iranian dissidents using Defender exclusions and Telegram C2.
68
Hackers Turn Telegram Into a Command Center for HEAVYGRAM Surveillance Malware
Group-IB links HEAVYGRAM, a Telegram-based Windows surveillance backdoor targeting Iranian dissidents and journalists since 2023, to the Handala Hack group with moderate confidence.
65
Ofcom discovers issuing Online Safety Act fines is easier than collecting them
Ofcom says most Online Safety Act fines totaling over £7 million remain unpaid as platforms structure businesses to evade collection.
35
From Hacks to Bioweapons, Claude Misuse Is Now Everywhere
Anthropic reports Claude was misused by Midnight Blizzard, ShinyHunters, disinformation campaigns, and bioweapon attempts; roundup also covers Xinbi takedown.
72
Brazil orders Discord to suspend livestreaming after teen suicide
Brazil's data protection authority orders Discord to disable its Go Live livestreaming feature nationwide until child-safety safeguards are demonstrated.
34
Related CVEs
by mentions- CVE-2026-107181<1%8.6IPC record injection in Telegram Desktop enables account takeover
- Numeric truncation RCE in Telegram rlottie
Appears with
- Telegram Desktopproduct · 3
- Telegramorganization · 2
- Handala Hackthreat actor · 2
- CRUDEEXCLUDEmalware · 2
- Microsoftvendor · 2
- Group-IBorganization · 2
- Telegramproduct · 2
- rlottieproduct · 2
- Metavendor · 2
- HEAVYGRAMmalware · 2
- Zero Day Initiativeorganization · 2
- Claudeai model · 1
- Contithreat actor · 1
- Red Sandstormthreat actor · 1
- Go Liveproduct · 1
- Xinbi Guaranteeorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.