CA
Vendor
canva
35
CVEs
0
On KEV
10
New 30D
Products
AF7.8
affinity
canva
27 CVEs0 on KEV7 new
OR8.6
ortto
canva
3 CVEs0 on KEV3 new
CA9.6
Canva
Canva
5 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-113409 New | OR ortto canva | 4.8 | Oct 29 | The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to stored cross-site scripting |
| CVE-2026-114173 New | OR ortto canva | 5.3 | Oct 29 | The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages |
| CVE-2026-113387 New | OR ortto canva | 8.6 | Oct 29 | The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML |
| CVE-2026-103220 | AF affinity canva | 4.5 | Oct 9 | The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing raster image data in Affinity document files, leading… |
| CVE-2026-101130 | AF affinity canva | 3.6 | Oct 9 | The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading… |
| CVE-2026-101094 | AF affinity canva | 3.6 | Oct 9 | The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files,… |
| CVE-2026-96396 | AF affinity canva | 4.9 | Oct 9 | The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when generating QuickLook thumbnails and… |
| CVE-2026-96395 | AF affinity canva | 3.6 | Oct 9 | The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity… |
| CVE-2026-96394 | AF affinity canva | 2.9 | Oct 9 | The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pixel data when generating QuickLook… |
| CVE-2026-96393 | AF affinity canva | 3.6 | Oct 9 | The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, leading to an out-of-bounds pointer… |
| CVE-2026-90860 | CA Canva Canva | 7.1 | Sep 21 | The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView |
| CVE-2026-92839 | CA Canva Canva | 4.3 | Sep 17 | Canva Desktop before v1.125.0 performed double decoding in the deeplink handler |
| CVE-2026-81546 | AF Affinity Canva | 7.7 | Sep 17 | The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based… |
| CVE-2026-85094 | CA Canva Canva | 8.8 | Sep 4 | The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView |
| CVE-2026-85085 | CA Canva Canva | 9.6 | Sep 4 | The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView |
| CVE-2025-66342 | AF Affinity Canva | 7.8 | Mar 17 | A type confusion vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-62500 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-61979 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-64733 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-66000 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-64301 | AF Affinity Canva | 7.8 | Mar 17 | An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-64776 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-64735 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-66633 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-58427 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-66617 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-47873 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-61952 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-66503 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-66042 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-65119 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-62403 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2026-20726 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2026-22882 | AF Affinity Canva | 7.1 | Mar 17 | An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity |
| CVE-2025-12792 | CA Canva Canva | 3.2 | Nov 18 | The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime |