CVE-2026-55644mediumCWE-20

CVE-2026-55644: falha de média gravidade em element-hq element-x-ios

Element X iOS: io.element.call deeplink allows attacker-controlled HTTPS origin and may grant mic/camera to that origin

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar element-x-ios

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.1epss 0.4%
Element X iOS is a Matrix iOS Client provided by Element. Element X iOS before version 26.05.0 fails to check the URL allowlist when parsing io.element.call://. If an attacker is able to trick the user into opening a maliciously crafted io.element.call:// URL, they are able to load an attacker-controlled origin inside the call screen's WKWebView which will be granted device microphone and camera permissions (provided the user has previously granted these permissions to Element X iOS). This issue has been patched in version 26.05.0.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
element-hq · element-x-ios
CVEs relacionadas — element-hq element-x-ios

No mesmo produto, das mais perigosas para as menos.

CVE-2025-31126MEDIUMElement X iOS allows the entity in control of the well-known file to break the confidentiality of embedded Element CallEPSS 0.2%