element-hq synapse vulnerabilities

CVEs per yearBy the year they were published

1. 20247
2. 20252
3. 20262

Newest CVEs

• CVE-2026-45078

  Synapse CPU starvation (Denial of Service)

  element-hq · synapse

  Medium6.8
• CVE-2026-45076

  Synapse pagination denial of service

  element-hq · synapse

  Medium5.1
• CVE-2025-61672

  Synapse: Invalid device keys degrade federation functionality

  element-hq · synapse

  Medium5.3
• CVE-2025-30355

  Synapse vulnerable to federation denial of service via malformed events

  element-hq · synapse

  High7.1
• CVE-2024-37303

  Synapse unauthenticated writes to the media repository allow planting of problematic content

  element-hq · synapse

  Medium5.3
• CVE-2024-37302

  Synapse denial of service through media disk space consumption

  element-hq · synapse

  High7.5
• CVE-2024-52805

  Synapse allows unsupported content types to lead to memory exhaustion

  element-hq · synapse

  High8.2
• CVE-2024-52815

  Synapse allows a a malformed invite to break the invitee's `/sync`

  element-hq · synapse

  High8.7
• CVE-2024-53867

  Synapse Matrix has a partial room state leak via Sliding Sync

  element-hq · synapse

  Medium4.3
• CVE-2024-53863

  Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders

  element-hq · synapse

  High8.2