EL
Product
element-web
by element-hq · last CVE Aug 21, 2026
6
CVEs
0
On KEV
7.0
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 3
Watch

Add element-web to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-32026
3.8
0%
Apr 8
Element Web could load a malicious instance of Element Call leaking media encryption keys
Affected: >= 1.11.16, < 1.11.97
CVE-2024-51749
3.5
0%
Nov 12
Element's thumbnails can be abused to misrepresent the content of an attachment
Affected: < 1.11.85
CVE-2025-59161
2.7
0%
Sep 16
In Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malicious room is left
Affected: < 1.11.112
Showing 3