Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1325 CNY

100%
Buy Us a Coffee

element-web — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in element-web, with AI-generated Chinese analysis, references, and POCs.

Vendor: element-hq

CVE IDTitleCVSSSeverityPublished
CVE-2025-59161 In Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malicious room is left CWE-20 7.5AIHighAI2025-09-16
CVE-2025-32026 Element Web could load a malicious instance of Element Call leaking media encryption keys CWE-497 3.8 Low2025-04-08
CVE-2024-51750 Element allows a malicious homeserver can modify events leading to unrenderable events or rooms CWE-248 5.0 Medium2024-11-12
CVE-2024-51749 Element's thumbnails can be abused to misrepresent the content of an attachment CWE-451 3.5 Low2024-11-12
CVE-2024-47779 Element Web vulnerable to potential exposure of access token via authenticated media CWE-200 7.5 -2024-10-15

All 5 known CVE vulnerabilities affecting element-web with full Chinese analysis, references, and POCs where available.