Element

Synapse pagination denial of service

Synapse CPU starvation (Denial of Service)

Matrix Authentication Service account password can be changed using an authenticated session without supplying the current password

In Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malicious room is left

Element X Android vulnerable to loading malicious web pages via received intent

Element Web could load a malicious instance of Element Call leaking media encryption keys

Element X iOS allows the entity in control of the well-known file to break the confidentiality of embedded Element Call

Element X Android allows the entity in control of the well-known file to break the confidentiality embedded Element Call

Element Android PIN autologout bypass

Element allows a malicious homeserver can modify events leading to unrenderable events or rooms