CVE-2021-36769: Telegram

Medium severity, CVSS 5.3. EPSS: 1.4% chance of exploitation in the next 30 days.

A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacker can cause the server to receive messages in a different order than they were sent a client.

Affected products

• Telegram Telegram: before 7.8.1 (fixed in 7.8.1); before 7.8.3 (fixed in 7.8.3)
• Telegram Telegram Desktop: before 2.8.8 (fixed in 2.8.8)

Published 2021-07-17. Last modified 2026-06-17.