CVE-2018-17780

Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an…

published September 29, 2018

CVSS
—
EPSS
2%
Percentile
78.2
In the wild
Unconfirmed
What it is

Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01803 · 78.2th percentile
Published
2018-09-29T19:00Z
EPSS history
Timeline
  • 29 SEP 19:00Z
    Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an…
    cvelistv5