{"metadata": {"vulnerability": "CVE-2023-26818", "count": 30, "kinds": {"milestone": 4, "sighting": 14, "kev": 0, "other": 12}}, "data": [{"timestamp": "2023-02-27T00:00:00Z", "date_only": false, "value": "2023-02-27T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-26818", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-05-15T23:10:39Z", "date_only": false, "value": "2023-05-15T23:10:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Russian_OSINT/2546", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "5cd495d4-8a4d-4153-88f7-c2dd6a472fcd", "content": "\ud83d\udcf2 \u041c\u044d\u0442\u0442 \u0419\u043e\u0445\u0430\u043d\u0441\u0435\u043d: \u0412 Telegram \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u0430\u0451\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0430\u043c\u0435\u0440\u0435 \u0438 \u043c\u0438\u043a\u0440\u043e\u0444\u043e\u043d\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83d\udd0dhttps://danrevah.github.io/2023/05/15/CVE-2023-26818-Bypass-TCC-with-Telegram\n\n\ud83d\udc46\"\u042f \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u043e\u0433\u043e \u043e\u0442\u0432\u0435\u0442\u0430 \u043e\u0442 Telegram \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u043c\u0435\u0441\u044f\u0446\u0430, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u043e\u0432 \u0441 \u043d\u0438\u043c\u0438 \u0438 \u0434\u0430\u0436\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0441\u044f \u0442\u0438\u043a\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 VINCE. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0448\u043b\u043e \u0442\u0440\u0438 \u043c\u0435\u0441\u044f\u0446\u0430, \u044f \u0440\u0435\u0448\u0438\u043b \u043f\u0440\u0438\u0434\u0430\u0442\u044c \u043e\u0433\u043b\u0430\u0441\u043a\u0435 \u044d\u0442\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e\", - \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440.\n\n\u270b @Russian_OSINT", "url": "https://t.me/Russian_OSINT/2546", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-16T09:58:06Z", "date_only": false, "value": "2023-05-16T09:58:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arvinclub1/176", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "167b2b59-dec2-47fd-aad6-d1fe99c6a03e", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f\u06cc \u062f\u0631 \u0646\u0633\u062e\u0647 \u0645\u06a9 \u062a\u0644\u06af\u0631\u0627\u0645 \u067e\u06cc\u062f\u0627 \u0634\u062f\u0647 \u06a9\u0647 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u062f\u0648\u0631\u0628\u06cc\u0646 \u0648 \u0645\u06cc\u06a9\u0631\u0648\u0641\u0648\u0646 \u0634\u0645\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.\n\u0627\u06cc\u0646 \u0627\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u0645\u0647\u0646\u062f\u0633 \u062f\u0631 \u06af\u0648\u06af\u0644 \u067e\u06cc\u062f\u0627 \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u0628\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 \u06af\u0632\u0627\u0631\u0634 \u0634\u062f\u0647 \u0648 \u0637\u0628\u0642 \u0645\u0639\u0645\u0648\u0644 \u062a\u0644\u06af\u0631\u0627\u0645 \u0628\u0647 \u0622\u0646 \u0631\u0633\u06cc\u062f\u06af\u06cc \u0646\u06a9\u0631\u062f\u0647.\nhttps://danrevah.github.io/2023/05/15/CVE-2023-26818-Bypass-TCC-with-Telegram", "url": "https://t.me/arvinclub1/176", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-16T12:07:17Z", "date_only": false, "value": "2023-05-16T12:07:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/4383", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "e9ebdb55-1c95-471c-a464-a5d7fc0ef66b", "content": "\ud83d\udcf2 \u041c\u044d\u0442\u0442 \u0419\u043e\u0445\u0430\u043d\u0441\u0435\u043d: \u0412 Telegram \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u0430\u0451\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0430\u043c\u0435\u0440\u0435 \u0438 \u043c\u0438\u043a\u0440\u043e\u0444\u043e\u043d\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83d\udd0dhttps://danrevah.github.io/2023/05/15/CVE-2023-26818-Bypass-TCC-with-Telegram\n\n\ud83d\udc46\"\u042f \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u043e\u0433\u043e \u043e\u0442\u0432\u0435\u0442\u0430 \u043e\u0442 Telegram \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u043c\u0435\u0441\u044f\u0446\u0430, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u043e\u0432 \u0441 \u043d\u0438\u043c\u0438 \u0438 \u0434\u0430\u0436\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0441\u044f \u0442\u0438\u043a\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 VINCE. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0448\u043b\u043e \u0442\u0440\u0438 \u043c\u0435\u0441\u044f\u0446\u0430, \u044f \u0440\u0435\u0448\u0438\u043b \u043f\u0440\u0438\u0434\u0430\u0442\u044c \u043e\u0433\u043b\u0430\u0441\u043a\u0435 \u044d\u0442\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e\", - \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440.\n\n\u270b @Russian_OSINT", "url": "https://t.me/true_secator/4383", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-16T21:51:19Z", "date_only": false, "value": "2023-05-16T21:51:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tech_b0lt_Genona/3721", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "3bcbc883-e870-4813-adff-ae974fc12113", "content": "The article will cover several basic concepts in macOS to provide the relevant background that will help the reader understand the process of identifying the weakness and writing an exploit that will gain a local privilege escalation by getting access to the camera through the permissions that were prreviously ganted to the Telegram application.\n. . .\nAfter that, we will write the Dylib that will be used in the exploit to perform the recording from the camera and save it to a file.\n\n\u0420\u0435\u0430\u043a\u0446\u0438\u044f Telegram \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u043f\u043e\u0445\u0443\u0439+\u043f\u043e\u0445\u0443\u0439\n\nCVE-2023-26818 - Bypass TCC with Telegram in macOS\nhttps://danrevah.github.io/2023/05/15/CVE-2023-26818-Bypass-TCC-with-Telegram/", "url": "https://t.me/tech_b0lt_Genona/3721", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-19T00:00:00Z", "date_only": false, "value": "2023-05-19T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-26818", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-05-19T12:15:00Z", "date_only": false, "value": "2023-05-19T12:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-26818", "record": "GSD-2023-26818", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-05-19T12:15:09Z", "date_only": false, "value": "2023-05-19T12:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HHV3-MHVJ-W7C3", "record": "GHSA-HHV3-MHVJ-W7C3", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-05-19T12:15:09.407Z", "date_only": false, "value": "2023-05-19T12:15:09.407", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-26818", "record": "FKIE_CVE-2023-26818", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-19T12:30:14Z", "date_only": false, "value": "2023-05-19T12:30:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HHV3-MHVJ-W7C3", "record": "GHSA-HHV3-MHVJ-W7C3", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-19T16:33:00Z", "date_only": false, "value": "2023-05-19T16:33:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/64460", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "2ff539c6-af7b-4b35-9792-7362ed8e3344", "content": "\u203c CVE-2023-26818 \u203c\n\nTelegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone ,or video recording via the DYLD_INSERT_LIBRARIES flag.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/64460"}, {"timestamp": "2023-05-26T18:06:00Z", "date_only": false, "value": "2023-05-26T18:06Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-26818", "record": "GSD-2023-26818", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-07-07T11:13:58Z", "date_only": false, "value": "2023-07-07T11:13:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/2z7cIAzK_voKeTZhFLfjQgiTkLBoUgw0bFPWcd2G3pBKZ7k", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "cc9520b4-92b4-4195-b607-bbf7b13bda66", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-31T05:16:49Z", "date_only": false, "value": "2023-08-31T05:16:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/969", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "56007a17-e07c-4625-ba2e-9bc2384910d4", "content": "https://github.com/Zeyad-Azima/CVE-2023-26818\nExploit MacOS TCC Bypass W/ Telegram\n#github", "url": "https://t.me/CNArsenal/969", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-31T10:59:01Z", "date_only": false, "value": "2023-08-31T10:59:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8944", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "42d6d728-0a49-4c31-b664-2a3d274964c7", "content": "#exploit\n1. CVE-2023-39141:\nAria2 WebUI - Path traversal\nhttps://github.com/codeb0ss/CVE-2023-39141-PoC\n\n2. CVE-2023-34040:\nSpring Kafka Deserialization Vulnerability\nhttps://github.com/Contrast-Security-OSS/Spring-Kafka-POC-CVE-2023-34040\n\n3. CVE-2023-26818:\nExploit MacOS TCC Bypass W/ Telegram\nhttps://github.com/Zeyad-Azima/CVE-2023-26818", "url": "https://t.me/CyberSecurityTechnologies/8944", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-09-01T16:30:14Z", "date_only": false, "value": "2023-09-01T16:30:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/11480", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "e66db366-3ef7-45e0-9bc8-4fc0149f7288", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 #Untested CVE-2023-26818: Exploit MacOS TCC Bypass W/ Telegram. You can read the vulnerability analysis Part 1 and Part 2 for sandbox bypass.\n\nhttps://github.com/Zeyad-Azima/CVE-2023-26818", "url": "https://t.me/cKure/11480", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-09-11T12:54:37Z", "date_only": false, "value": "2023-09-11T12:54:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5118", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "7e66ab74-312e-4bec-8d6d-5551037986ef", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-26818 Exploit MacOS TCC Bypass W/ Telegram\nURL\uff1ahttps://github.com/Zeyad-Azima/CVE-2023-26818\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5118", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-13T01:20:53.754Z", "date_only": false, "value": "2023-12-13T01:20:53.754678Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-26818", "record": "GSD-2023-26818", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-04-04T04:15:05Z", "date_only": false, "value": "2024-04-04T04:15:05Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HHV3-MHVJ-W7C3", "record": "GHSA-HHV3-MHVJ-W7C3", "field": "modified", "linked_record": true}, {"timestamp": "2025-01-21T19:55:20.515Z", "date_only": false, "value": "2025-01-21T19:55:20.515781Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-26818", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-21T19:55:20.515Z", "date_only": false, "value": "2025-01-21T19:55:20.515781Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-26818", "record": "FKIE_CVE-2023-26818", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-01-21T19:56:06.864Z", "date_only": false, "value": "2025-01-21T19:56:06.864Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-26818", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-05T00:19:53.867Z", "date_only": false, "value": "2026-07-05T00:19:53.867Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2023-26818", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-09T00:24:16.862Z", "date_only": false, "value": "2026-07-09T00:24:16.862Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-26818", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-09T00:24:16.862Z", "date_only": false, "value": "2026-07-09T00:24:16.862Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-26818", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-09T01:18:10.597Z", "date_only": false, "value": "2026-07-09T01:18:10.597", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-26818", "record": "FKIE_CVE-2023-26818", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-29T12:02:29.210Z", "date_only": false, "value": "2026-07-29T12:02:29.210810Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3415", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "8e9774cb-eac8-40b7-bde9-2a8709efa8c6", "url": "https://t.me/reverseame/3415"}, {"timestamp": "2026-07-30T00:02:30.027Z", "date_only": false, "value": "2026-07-30T00:02:30.027901Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3415", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "1a39efb7-7aae-4673-bff8-afdeb8e16567", "url": "https://t.me/reverseame/3415"}, {"timestamp": "2026-08-02T17:00:04.725Z", "date_only": false, "value": "2026-08-02T17:00:04.725195Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3415", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "63f14d17-6029-4a27-b470-e3273f0e121d", "url": "https://t.me/reverseame/3415", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-03T03:22:19.564Z", "date_only": false, "value": "2026-08-03T03:22:19.564740Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3415", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "4bcc204e-fd18-474f-8184-290e9d74ef6c", "url": "https://t.me/reverseame/3415", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-12T17:04:25.441Z", "anchors": {"origin": {"timestamp": "2023-05-19T00:00:00Z", "date_only": false, "value": "2023-05-19T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-26818", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-05-19T00:00:00Z", "date_only": false, "value": "2023-05-19T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-26818", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-05-15T23:10:39Z", "date_only": false, "value": "2023-05-15T23:10:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Russian_OSINT/2546", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "5cd495d4-8a4d-4153-88f7-c2dd6a472fcd", "content": "\ud83d\udcf2 \u041c\u044d\u0442\u0442 \u0419\u043e\u0445\u0430\u043d\u0441\u0435\u043d: \u0412 Telegram \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u0430\u0451\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0430\u043c\u0435\u0440\u0435 \u0438 \u043c\u0438\u043a\u0440\u043e\u0444\u043e\u043d\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83d\udd0dhttps://danrevah.github.io/2023/05/15/CVE-2023-26818-Bypass-TCC-with-Telegram\n\n\ud83d\udc46\"\u042f \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u043e\u0433\u043e \u043e\u0442\u0432\u0435\u0442\u0430 \u043e\u0442 Telegram \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u043c\u0435\u0441\u044f\u0446\u0430, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u043e\u0432 \u0441 \u043d\u0438\u043c\u0438 \u0438 \u0434\u0430\u0436\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0441\u044f \u0442\u0438\u043a\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 VINCE. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0448\u043b\u043e \u0442\u0440\u0438 \u043c\u0435\u0441\u044f\u0446\u0430, \u044f \u0440\u0435\u0448\u0438\u043b \u043f\u0440\u0438\u0434\u0430\u0442\u044c \u043e\u0433\u043b\u0430\u0441\u043a\u0435 \u044d\u0442\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e\", - \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440.\n\n\u270b @Russian_OSINT", "url": "https://t.me/Russian_OSINT/2546", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -262161.0, "hours": -72.8225, "days": -3.0342708333333333, "min_seconds": -348561.0, "max_seconds": -262161.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2023-05-19T00:00:00Z", "date_only": false, "value": "2023-05-19T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-26818", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-05-15T23:10:39Z", "date_only": false, "value": "2023-05-15T23:10:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Russian_OSINT/2546", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "5cd495d4-8a4d-4153-88f7-c2dd6a472fcd", "content": "\ud83d\udcf2 \u041c\u044d\u0442\u0442 \u0419\u043e\u0445\u0430\u043d\u0441\u0435\u043d: \u0412 Telegram \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u0430\u0451\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0430\u043c\u0435\u0440\u0435 \u0438 \u043c\u0438\u043a\u0440\u043e\u0444\u043e\u043d\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83d\udd0dhttps://danrevah.github.io/2023/05/15/CVE-2023-26818-Bypass-TCC-with-Telegram\n\n\ud83d\udc46\"\u042f \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u043e\u0433\u043e \u043e\u0442\u0432\u0435\u0442\u0430 \u043e\u0442 Telegram \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u043c\u0435\u0441\u044f\u0446\u0430, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u043e\u0432 \u0441 \u043d\u0438\u043c\u0438 \u0438 \u0434\u0430\u0436\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0441\u044f \u0442\u0438\u043a\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 VINCE. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0448\u043b\u043e \u0442\u0440\u0438 \u043c\u0435\u0441\u044f\u0446\u0430, \u044f \u0440\u0435\u0448\u0438\u043b \u043f\u0440\u0438\u0434\u0430\u0442\u044c \u043e\u0433\u043b\u0430\u0441\u043a\u0435 \u044d\u0442\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e\", - \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440.\n\n\u270b @Russian_OSINT", "url": "https://t.me/Russian_OSINT/2546", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 110048665.441249, "hours": 30569.073733680278, "days": 1273.7114055700115, "min_seconds": 109962265.441249, "max_seconds": 110048665.441249, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-05-19T00:00:00Z", "date_only": false, "value": "2023-05-19T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-26818", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T17:04:25.441Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 110310826.441249, "hours": 30641.896233680276, "days": 1276.745676403345, "min_seconds": 110310826.441249, "max_seconds": 110310826.441249, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-05-15T23:10:39Z", "date_only": false, "value": "2023-05-15T23:10:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Russian_OSINT/2546", "record": "CVE-2023-26818", "field": "creation_timestamp", "uuid": "5cd495d4-8a4d-4153-88f7-c2dd6a472fcd", "content": "\ud83d\udcf2 \u041c\u044d\u0442\u0442 \u0419\u043e\u0445\u0430\u043d\u0441\u0435\u043d: \u0412 Telegram \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u0430\u0451\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0430\u043c\u0435\u0440\u0435 \u0438 \u043c\u0438\u043a\u0440\u043e\u0444\u043e\u043d\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83d\udd0dhttps://danrevah.github.io/2023/05/15/CVE-2023-26818-Bypass-TCC-with-Telegram\n\n\ud83d\udc46\"\u042f \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u043e\u0433\u043e \u043e\u0442\u0432\u0435\u0442\u0430 \u043e\u0442 Telegram \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u043c\u0435\u0441\u044f\u0446\u0430, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u043e\u0432 \u0441 \u043d\u0438\u043c\u0438 \u0438 \u0434\u0430\u0436\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0441\u044f \u0442\u0438\u043a\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 VINCE. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0448\u043b\u043e \u0442\u0440\u0438 \u043c\u0435\u0441\u044f\u0446\u0430, \u044f \u0440\u0435\u0448\u0438\u043b \u043f\u0440\u0438\u0434\u0430\u0442\u044c \u043e\u0433\u043b\u0430\u0441\u043a\u0435 \u044d\u0442\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e\", - \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440.\n\n\u270b @Russian_OSINT", "url": "https://t.me/Russian_OSINT/2546", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-12T17:04:25.441Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}