Vulnerabilities in element-hq
30 resultsCVE-2024-51749LOWElement's thumbnails can be abused to misrepresent the content of an attachmentEPSS 0.4%CVE-2026-24044CRITICALESS Community Helm Chart has a weak server key generation methodEPSS 0.3%CVE-2026-62347MEDIUMElement Call exposes shared passwords in logsEPSS 0.3%CVE-2026-48007HIGHElement Call reports full URLs of visited pages to analytics serverEPSS 0.3%CVE-2025-31126MEDIUMElement X iOS allows the entity in control of the well-known file to break the confidentiality of embedded Element CallEPSS 0.2%CVE-2025-31127MEDIUMElement X Android allows the entity in control of the well-known file to break the confidentiality embedded Element CallEPSS 0.2%CVE-2025-27606MEDIUMElement Android PIN autologout bypassEPSS 0.2%CVE-2025-32026LOWElement Web could load a malicious instance of Element Call leaking media encryption keysEPSS 0.2%CVE-2026-119407HIGHElement Web and Element Desktop before 1.12.32 Forced Logout via Guest Credential URL ParametersEPSS 0.1%CVE-2026-45078MEDIUMSynapse CPU starvation (Denial of Service)EPSS 0.1%