Matrix vulnerabilities
6 published CVEs name Matrix among the affected products.
- Published CVEs
- 6
- Last 12 months
- 0
- Critical
- 0
- Known exploited
- 0
Critical 0High 3Medium 3Low 0Not scored 0
CVEs per yearBy the year they were published
- 20244
- 20252
Newest CVEs
- CVE-2025-54315
The Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event uniqueness.
Matrix · Matrix specification
High7.1 - CVE-2025-49090
The Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution before 2.1) has deficient state resolution.
Matrix · Matrix specification
High7.1 - CVE-2024-38432
Matrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied File
Matrix · Tafnit v8
Medium5.5 - CVE-2024-38431
Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy
Matrix · Tafnit v8
Medium5.3 - CVE-2024-38430
Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Matrix · Tafnit v8
Medium5.4 - CVE-2024-38429
Matrix - CWE-552: Files or Directories Accessible to External Parties
Matrix · Tafnit v8
High7.5