Known Vulnerabilities for Element by Matrix
Listed below are 2 of the newest known vulnerabilities associated with "Element" by "Matrix".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-67174 json | Pivotick contains a DOM-based cross-site scripting vulnerability in its generic UI element resolution and icon-rendering util... | Not Provided | 2026-07-28 | 2026-07-28 |
| CVE-2026-66921 json | Pivotick’s Markdown node-reference renderer failed to HTML-escape the attacker-controlled nodeName value before interpolati... | Not Provided | 2026-07-28 | 2026-07-28 |
| CVE-2026-66918 json | Pivotick fails to sanitize attacker-controlled SVG markup supplied through the per-node style.svgIcon property before inserti... | Not Provided | 2026-07-28 | 2026-07-28 |
| CVE-2026-66824 json | A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the seri... | Not Provided | 2026-07-27 | 2026-07-28 |
| CVE-2026-66364 json | The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multica... | Not Provided | 2026-07-30 | 2026-07-31 |
| CVE-2026-65904 json | DOMPurify through 3.3.3 fails to sanitize DOM elements passed via IN_PLACE mode when the element originates from a different ... | Not Provided | 2026-07-23 | 2026-07-24 |
| CVE-2026-65900 json | DOMPurify versions >=3.0.0 and before 3.4.8, when configured with SAFE_FOR_TEMPLATES together with a DOM output mode (RETURN_... | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-65841 json | Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.13.6, Jodit's clean-html denyTags fi... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-65623 json | Inefficient Algorithmic Complexity vulnerability in mtrudel bandit allows unauthenticated remote denial of service via CPU ex... | Not Provided | 2026-07-24 | 2026-07-25 |
| CVE-2026-65606 json | SiYuan before v3.7.2 contains a cross-site scripting vulnerability in the siyuan:// protocol handler. When a siyuan://plugins... | Not Provided | 2026-07-23 | 2026-07-23 |