element-hq element-web

• CVE-2026-119407 High 7.1 Element Web and Element Desktop before 1.12.32 Forced Logout via Guest Credential URL Parameters 0.1%
• CVE-2026-55850 Medium 5.3 Element Web: A malicious homeserver can inject HTML in Element Web using its homepage 0.5%
• CVE-2025-59161 Low 2.7 In Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malicious room is left 0.4%
• CVE-2025-32026 Low 3.8 Element Web could load a malicious instance of Element Call leaking media encryption keys 0.2%
• CVE-2024-51750 Medium 5.0 Element allows a malicious homeserver can modify events leading to unrenderable events or rooms 0.5%
• CVE-2024-51749 Low 3.5 Element's thumbnails can be abused to misrepresent the content of an attachment 0.4%
• CVE-2024-47779 High 7.0 Element Web vulnerable to potential exposure of access token via authenticated media 0.4%