Advisories · Technology

element-hq element-desktop.

Every CVE that names element-hq element-desktop among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-119407 CVE record

CVSS 7.1 High

Element Web and Element Desktop before 1.12.32 Forced Logout via Guest Credential URL Parameters
- element-hq element-web
- element-hq element-desktop
- Cross-site request forgery (CSRF)
Not analysed yet 30 Oct 2026
CVE-2024-47771 CVE record

CVSS 7.0 High

Element Desktop vulnerable to potential exposure of access token via authenticated media
- element-hq element-desktop
- Information disclosure
Not analysed yet 15 Oct 2024