Last updated
Telegram is a cloud-based mobile and desktop messaging app with a focus on security and speed.
$ winget install --id Telegram.TelegramDesktop --exact --version 6.9.2Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.
Telegram Desktop uses EXE (Inno Setup). The silent install switches are /VERYSILENT /SUPPRESSMSGBOXES /NORESTART.
tsetup-x64.6.9.2.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART
See the full silent install reference for Telegram Desktop →
For Intune admins
Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.
Start free 30-day trialNo credit card required.
| Architecture | Type | Scope | Install | Download |
|---|---|---|---|---|
| x86 | Portable in ZIP | - | Direct | |
| x86 | EXE Inno Setup | user | Direct | |
| x64 | Portable in ZIP | - | Direct | |
| x64 | EXE Inno Setup | user | Direct | |
| arm64 | Portable in ZIP | - | Direct | |
| arm64 | EXE Inno Setup | user | Direct |
Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.
5 known CVEs via NVD
Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash.
A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacker can cause the server to receive messages in a different order than they were sent a client.
Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntarily opened Export Wizard but is then distracted. An attacker then approaches the unattended desktop and...
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension.
Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat invitation URL.
See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.
More from Telegram FZ-LLC or browse chat, messaging, messenger.