Skip to content
Noroxi

Matrix records

82 published records for vendor matrix.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
91.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

82 records
  • CVE-2021-34813
    40Plan

    Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room

    CriticalCVSS 9.8No exploitEPSS 4%

    matrix · olmJun 16, 2021

  • CVE-2021-44538
    40Plan

    The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow.

    CriticalCVSS 9.8No exploitEPSS 2%

    matrix · elementDec 14, 2021

  • CVE-2019-18835
    39Monitor

    Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs.

    CriticalCVSS 9.8No exploitEPSS 1%

    matrix · synapseNov 7, 2019

  • CVE-2023-38690
    39Monitor

    matrix-appservice-irc IRC command injection via admin commands containing newlines

    CriticalCVSS 9.8No exploitEPSS 1%

    matrix · matrix irc bridgeAug 4, 2023

  • CVE-2023-43656
    36Monitor

    Sandbox escape for instances that have enabled transformation functions in matrix-hookshot

    CriticalCVSS 9.0No exploitEPSS 0%

    matrix · hookshotSep 27, 2023

  • CVE-2018-16515
    35Monitor

    Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper tr

    HighCVSS 8.8No exploitEPSS 2%

    matrix · synapseSep 18, 2018

  • CVE-2022-29166
    35Monitor

    Improper handling of multiline messages in matrix-appservice-irc

    HighCVSS 8.8No exploitEPSS 1%

    matrix · matrix irc bridgeMay 5, 2022

  • CVE-2022-39203
    35Monitor

    Parsing issue in matrix-org/node-irc leading to room takeovers

    HighCVSS 8.8No exploitEPSS 1%

    matrix · matrix irc bridgeSep 13, 2022

  • CVE-2022-36009
    35Monitor

    Incorrect parsing of access level in gomatrixserverlib and dendrite

    HighCVSS 8.8No exploitEPSS 1%

    matrix · dendriteAug 19, 2022

  • CVE-2024-52815
    34Monitor

    Synapse allows a a malformed invite to break the invitee's `/sync`

    HighCVSS 8.7No exploitEPSS 1%

    matrix · synapseDec 3, 2024

  • CVE-2021-21332
    32Monitor

    Cross-site scripting (XSS) vulnerability in the password reset endpoint

    HighCVSS 8.2No exploitEPSS 1%

    matrix · synapseMar 26, 2021

  • CVE-2023-28427
    32Monitor

    Prototype pollution in matrix-js-sdk

    HighCVSS 8.2No exploitEPSS 1%

    matrix · javascript sdkMar 28, 2023

  • CVE-2024-52805
    32Monitor

    Synapse allows unsupported content types to lead to memory exhaustion

    HighCVSS 8.2No exploitEPSS 1%

    matrix · synapseDec 3, 2024

  • CVE-2024-53863
    32Monitor

    Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders

    HighCVSS 8.2No exploitEPSS 1%

    matrix · synapseDec 3, 2024

  • CVE-2020-26890
    31Monitor

    Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, al

    HighCVSS 7.5No exploitEPSS 3%

    matrix · synapseNov 23, 2020

  • CVE-2019-5885
    31Monitor

    Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secre

    HighCVSS 7.5No exploitEPSS 2%

    matrix · synapseMar 21, 2019

  • CVE-2018-12423
    31Monitor

    In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.

    HighCVSS 7.5No exploitEPSS 2%

    matrix · synapseJun 14, 2018

  • CVE-2021-29430
    31Monitor

    Denial of service attack via memory exhaustion

    HighCVSS 7.5No exploitEPSS 2%

    matrix · sydentApr 15, 2021

  • CVE-2018-12291
    31Monitor

    The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events fe

    HighCVSS 7.5No exploitEPSS 2%

    matrix · synapseJun 13, 2018

  • CVE-2019-11842
    31Monitor

    An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1.

    HighCVSS 7.5No exploitEPSS 2%

    matrix · sydentMay 9, 2019

  • CVE-2021-41281
    30Monitor

    Path traversal in Matrix Synapse

    HighCVSS 7.5No exploitEPSS 2%

    matrix · synapseNov 23, 2021

  • CVE-2018-10657
    30Monitor

    Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusabl

    HighCVSS 7.5No exploitEPSS 2%

    matrix · synapseMay 2, 2018

  • CVE-2022-39249
    30Monitor

    Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions

    HighCVSS 7.5No exploitEPSS 1%

    matrix · javascript sdkSep 28, 2022

  • CVE-2025-30355
    30Monitor

    Synapse vulnerable to federation denial of service via malformed events

    HighCVSS 7.5No exploitEPSS 1%

    matrix · synapseMar 26, 2025

  • CVE-2022-39250
    30Monitor

    Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification

    HighCVSS 7.5No exploitEPSS 1%

    matrix · javascript sdkSep 29, 2022