CyberSecBulletin

Element vulnerabilities

We track 2 vulnerabilities in Element products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 29, 2024.

2vulnerabilities
0critical
2high
0exploited
8.3average CVSS score

Latest Element vulnerabilities

  • 7.8 High severity

    element-android: Improper Restriction of Communication Channel to Intended Endpoints

    CVE-2024-26131Element-hq

    Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10 is vulnerable to intent redirection, allowing a third-party malicious application to start any internal activity by passing some extra parameters. Possible impact include

  • 8.8 High severity

    Desktop: Use After Free

    CVE-2022-23597ElementEPSS 1.51%

    Element Desktop is a Matrix client for desktop platforms with Element Web at its core. Element Desktop before 1.9.7 is vulnerable to a remote program execution bug with user interaction. The exploit is non-trivial and requires clicking on a malicious link, fol