Element

2 CVEs across 3 Element products. Browse Element vulnerabilities, severities, and proof-of-concept exploits.

Element products with known CVEs

ProductCVEs
Element4
Synapse2
Desktop1
Element CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-45078Medium5.52026-05-28Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, local authenticated users can cause Synapse to starve other requests of CPU and l…
CVE-2026-45076Low2.72026-05-28Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way tha…
CVE-2025-27606Medium5.12025-03-14Element Android is an Android Matrix Client provided by Element. Element Android up to version 1.6.32 can, under certain circumstances, fail to logout the user…
CVE-2024-26132Medium4.02024-02-29Element Android is an Android Matrix Client. A third-party malicious application installed on the same phone can force Element Android, version 0.91.0 through…
CVE-2024-26131High8.42024-02-29Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10 is vulnerable to intent redirection, allowing a third-party malicious…
CVE-2022-41904Medium6.42022-11-11Element iOS is an iOS Matrix client provided by Element. It is based on MatrixSDK. Prior to version 1.9.7, events encrypted using Megolm for which trust could…
CVE-2022-23597High8.32022-02-01Element Desktop is a Matrix client for desktop platforms with Element Web at its core. Element Desktop before 1.9.7 is vulnerable to a remote program execution…