matrix-org

Records116All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high42CVSS 7.0–8.9

Exploited now

matrix-org records in CISA KEV

No matrix-org vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Synapse 40 records MEDIUM Javascript Sdk 10 records MEDIUM Matrix Irc Bridge 7 records MEDIUM Sydent 7 records HIGH Olm 5 records MEDIUM Software Development Kit 4 records MEDIUM Dendrite 2 records MEDIUM Element 2 records MEDIUM

Records

2 records in Element · all components

TI-2021-20136 CVE-2021-44538 · GHSA-q7f4-j236-f4hc

The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer…

MEDIUM 46

The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02001 Published 2021-12-14 No fix listed CWE-119

TI-2021-17749 CVE-2021-40824 · GHSA-jjmc-4p83-pp26

A logic error in the room key sharing functionality of Element Android before 1.2.2 and…

LOW 28

A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix SDK for Android) before 1.2.2 allows a malicious Matrix homeserver present in an encrypted room to s…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00662 Published 2021-09-13 Fixed in 1.2.2 CWE-290

Open these records in search →

Critical	8
High	42
Medium	57
Low	9
No CVSS	0