Skip to content
OpenAdvisories

Vendor

element-hq

30 known vulnerabilities.

Products

synapse 11 element-web 7 element-android 3 element-desktop 2 element-call 2 element-x-ios 2 element-x-android 2 matrix-authentication-service 1 ess-helm 1 matrix-tools 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.7
    CVE-2025-59161

    In Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malicious room is left

    Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry …

    element-hq element-web
  • Low 3.8
    CVE-2025-32026

    Element Web could load a malicious instance of Element Call leaking media encryption keys

    Element Web is a Matrix web client built using the Matrix React SDK. Element Web, starting from version 1.11.16 up to version 1.11.96, can be configured to load Element Call from an external URL. Under certain conditions, the external page is able to get acce…

    element-hq element-web
  • Low 3.5
    CVE-2024-51749

    Element's thumbnails can be abused to misrepresent the content of an attachment

    Element is a Matrix web client built using the Matrix React SDK. Versions of Element Web and Desktop earlier than 1.11.85 do not check if thumbnails for attachments, stickers and images are coherent. It is possible to add thumbnails to events trigger a file d…

    element-hq element-web