Element vulnerabilities

Products

• Element 4
• Synapse 2

Newest

• element synapse Synapse pagination denial of service CVE-2026-45076 Fix available 5.1 MediumMay 14, 2026
• element synapse Synapse CPU starvation (Denial of Service) CVE-2026-45078 Fix available 6.8 MediumMay 14, 2026
• element, element-hq element-android +1 more Element Android PIN autologout bypass CVE-2025-27606 5.1 MediumMarch 14, 2025
• element, element-hq element-android +1 more Element Android can be asked to share internal files. CVE-2024-26132 4.0 MediumFebruary 20, 2024
• element, element-hq element-android +1 more Element Android Intent Redirection CVE-2024-26131 8.4 HighFebruary 20, 2024
• element, vector-im element-ios +1 more Element iOS is vulnerable due to missing decoration for events decrypted with untrusted Megolm sessions CVE-2022-41904 6.4 MediumNovember 11, 2022
• element desktop Remote program execution with user interaction CVE-2022-23597 Fix available 8.3 HighFebruary 1, 2022