Vendor
Element
7 known vulnerabilities in products by Element, 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-23597 | Remote program execution with user interaction | 8.3 | |
| High | CVE-2024-26131 | Element Android Intent Redirection | 8.4 | |
| Medium | CVE-2026-45078 | Synapse CPU starvation (Denial of Service) | 5.5 | |
| Medium | CVE-2026-45076 | Synapse pagination denial of service | 2.7 | |
| Medium | CVE-2022-41904 | Vector-im Element-ios: Insufficient UI Warning of Dangerous Operations | 6.4 | |
| Medium | CVE-2025-27606 | Element Android PIN autologout bypass | 5.1 | |
| Medium | CVE-2024-26132 | Element-hq Element-android: Exposure of Sensitive Information to an Unauthorized Actor | 4.0 |
Products
| Element | 4 | 0 |