What’s Vulnerable › Products

element-hq element-desktop vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your element-hq element-desktop version is affected

Latest element-hq element-desktop vulnerabilities

• CVE-2026-119407 — Element Web and Element Desktop before 1.12.32 Forced Logout via Guest Credential URL Parameters (CVSS 7.1)
• CVE-2024-47771 — Element Desktop vulnerable to potential exposure of access token via authenticated media (CVSS 7.0)