element-hq synapse vulnerabilities
11 published CVEs name element-hq synapse among the affected products.
- 11Published CVEs11 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-45078
Synapse CPU starvation (Denial of Service)
element-hq · synapse
Medium6.8 - CVE-2026-45076
Synapse pagination denial of service
element-hq · synapse
Medium5.1 - CVE-2025-61672
Synapse: Invalid device keys degrade federation functionality
element-hq · synapse
Medium5.3 - CVE-2025-30355
Synapse vulnerable to federation denial of service via malformed events
element-hq · synapse
High7.1 - CVE-2024-37303
Synapse unauthenticated writes to the media repository allow planting of problematic content
element-hq · synapse
Medium5.3 - CVE-2024-37302
Synapse denial of service through media disk space consumption
element-hq · synapse
High7.5 - CVE-2024-52805
Synapse allows unsupported content types to lead to memory exhaustion
element-hq · synapse
High8.2 - CVE-2024-52815
Synapse allows a a malformed invite to break the invitee's `/sync`
element-hq · synapse
High8.7 - CVE-2024-53867
Synapse Matrix has a partial room state leak via Sliding Sync
element-hq · synapse
Medium4.3 - CVE-2024-53863
Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders
element-hq · synapse
High8.2