AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-41904

MEDIUM · CVSS 6.4 EPSS 0.41% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-11-11 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2022-41904
Severity
MEDIUM
CVSS
6.4
EPSS
0.41%

Original NVD Description

Element iOS is an iOS Matrix client provided by Element. It is based on MatrixSDK. Prior to version 1.9.7, events encrypted using Megolm for which trust could not be established did not get decorated accordingly (with warning shields). Therefore a malicious homeserver could inject messages into the room without the user being alerted that the messages were not sent by a verified group member, even if the user has previously verified all group members. This issue has been patched in Element iOS 1.9.7. There are currently no known workarounds.