Known vulnerabilities in Synapse

Vendor: Matrix.org
Software: Synapse
Software CPE: cpe:2.3:a:matrix_org:synapse:*:*:*:*:*:*:*:*
Total vulnerabilities: 63
Public exploits: 2
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Synapse Synapse is affected by 63 known vulnerabilities: 1 critical, 4 high, 31 medium, 26 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139996 - Improper Access Control
CWE-284 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU139994 - Improper Access Control
CWE-284 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU139993 - Insufficient Verification of Data Authenticity
CWE-345 Medium
No
No
1.157.2 29.07.2026 SB2026072952
#VU139992 - Resource exhaustion
CWE-400 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU139991 - Improper Access Control
CWE-284 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU139990 - Improper Access Control
CWE-284 Medium
No
No
1.157.2 29.07.2026 SB2026072952
#VU139989 - Improper Handling of Exceptional Conditions
CWE-755 Medium
No
No
1.157.2 29.07.2026 SB2026072952
#VU139988 - Improper input validation
CWE-20 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU139987 - Improper input validation
CWE-20 Medium
No
No
1.157.2 29.07.2026 SB2026072952
#VU139986 - Improper input validation
CWE-20 Medium
No
No
1.157.2 29.07.2026 SB2026072952
#VU139985 - Improper Access Control
CWE-284 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU131158 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-45076
CWE-754 Low
No
No
1.152.1 12.05.2026 SB2026051262
#VU131157 - Resource exhaustion
CVE-2026-45078
CWE-400 Low
No
No
1.152.1 12.05.2026 SB2026051262
#VU127007 - Improper Validation of Specified Type of Input
CVE-2025-61672
CWE-1287 Low
No
No
1.138.3, 1.139.1 23.04.2026 SB2026042391
#VU106284 - Improper input validation
CVE-2025-30355
CWE-20 High
No
Exploited
1.127.1 31.03.2025 SB2025033143
SB2025033159
SB2025033160
and 1 more
#VU127005 - Allocation of Resources Without Limits or Throttling
CVE-2024-37302
CWE-770 Medium
No
No
1.106.0 03.12.2024 SB20241203116
#VU127004 - Missing Authentication for Critical Function
CVE-2024-37303
CWE-306 Medium
No
No
1.106.0 03.12.2024 SB20241203116
#VU127003 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2024-53867
CWE-497 Low
No
No
1.120.1 03.12.2024 SB20241203115
SB2024120478
#VU127001 - Improper input validation
CVE-2024-52815
CWE-20 Medium
No
No
1.120.1 03.12.2024 SB20241203115
SB2024120477
SB2024120478
#VU127000 - Interpretation Conflict
CVE-2024-53863
CWE-436 Medium
No
No
1.120.1 03.12.2024 SB20241203115
SB2024120477
SB2024120478


Showing elements 1 - 20 out of 63