Lucene search
+L

17 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2025-14784

Malicious code in bioql PyPI...

5.3CVSS5.4AI score0.00204EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/04/25 11:56 p.m.•16 views

CVE-2025-27599

Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicious app, can force Element X up to version 25.04.1 to load a webpage with similar permissions to Element Call and automatically grant it...

6.5CVSS5.5AI score0.00367EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/18 4:15 p.m.•20 views

CVE-2025-27599

Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicious app, can force Element X up to version 25.04.1 to load a webpage with similar permissions to Element Call and automatically grant it...

6.5CVSS0.00367EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/04/18 3:49 p.m.•15 views

CVE-2025-27599 Element X Android vulnerable to loading malicious web pages via received intent

Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicious app, can force Element X up to version 25.04.1 to load a webpage with similar permissions to Element Call and automatically grant it...

6.5CVSS5.5AI score0.00367EPSS
SaveExploits0References3
Mend
Mend
•added 2025/04/18 3:49 p.m.•9 views

CVE-2025-27599

Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicious app, can force Element X up to version 25.04.1 to load a webpage with similar permissions to Element Call and automatically grant it...

6.9CVSS5.5AI score0.00367EPSS
SaveExploits0References5
CVE
CVE
•added 2025/04/18 3:49 p.m.•78 views

CVE-2025-27599

Element X Android (Element X Android apps by element.io) is affected prior to version 25.04.2. A crafted hyperlink on a webpage or a locally installed malicious app can cause Element X up to 25.04.1 to load a webpage with permissions similar to Element Call and automatically grant temporary acces...

6.5CVSS5.5AI score0.00367EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/04/18 12:00 a.m.•15 views

Element X Android security vulnerability

Element X Android is an Android Matrix application from Element open source using Matrix Rust Sdk and Jetpack Compose. A security vulnerability exists in Element X Android versions prior to 25.04.2, which stems from a specially crafted hyperlink that could result in automatically granting tempora...

6.5CVSS5.7AI score0.00367EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/04/05 6:34 p.m.•33 views

CVE-2025-31127

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS5.9AI score0.00204EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/03 6:15 p.m.•35 views

CVE-2025-31127

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS0.00204EPSS
SaveExploits0References2
CVE
CVE
•added 2025/04/03 5:54 p.m.•70 views

CVE-2025-31127

Element X Android (Matrix Android client by element.io) is affected in versions 0.4.16 through 25.03.3 where the entity controlling the element.json well-known file can, under certain conditions, access the media encryption keys used for an Element Call. The issue stems from how the well-known co...

5.3CVSS5.8AI score0.00204EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/04/03 5:54 p.m.•16 views

CVE-2025-31127 Element X Android allows the entity in control of the well-known file to break the confidentiality embedded Element Call

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS5.8AI score0.00204EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/04/03 5:54 p.m.•55 views

CVE-2025-31127 Element X Android allows the entity in control of the well-known file to break the confidentiality embedded Element Call

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS6.8AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2025/04/03 5:54 p.m.•36 views

CVE-2025-31127 Element X Android allows the entity in control of the well-known file to break the confidentiality embedded Element Call

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS0.00204EPSS
SaveExploits0References2
Mend
Mend
•added 2025/04/03 5:54 p.m.•8 views

CVE-2025-31127

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

6.9CVSS5.8AI score0.00204EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/03 12:00 a.m.•21 views

Element X Android information leakage vulnerability

Element X Android is an Element open source Android Matrix application using Matrix Rust Sdk and Jetpack Compose. An information disclosure vulnerability exists in Element X Android versions 0.4.16 through 25.03.3, which originates in the element.json file and could lead to the disclosure of medi...

5.3CVSS5.7AI score0.00204EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/03 12:00 a.m.•22 views

PT-2025-14782 · Element · Element

Name of the Vulnerable Software and Affected Versions: Element X Android versions 0.4.16 through 25.03.3 Description: The issue allows an entity in control of the element.json well-known file to access media encryption keys used for an Element Call under certain conditions. Recommendations: For...

5.3CVSS5.8AI score0.00204EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/03 12:00 a.m.•7 views

CVE-2025-31127: Exposure of Sensitive Information to an Unauthorized Actor

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS5.9AI score0.00204EPSS
SaveExploits0References1
Rows per page
Query Builder