Vulnerabilidades em Canva
36 resultadosAnálise Vexday
Canva possui 21 CVEs registradas na base, porém nenhuma sob ataque ativo nem com severidade crítica, indicando risco contido. A fraqueza dominante é CWE-125 (leitura fora dos limites), típica de falhas de validação de memória. Não há vulnerabilidades publicadas nos últimos 90 dias, sugerindo que o risco atual é legado e de baixa prioridade operacional.
CVE-2026-85094HIGHThe Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView. A threat EPSS 0.4%CVE-2026-85085CRITICALThe Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView. A threat actor who controls the page lEPSS 0.4%CVE-2024-32545HIGHWordPress Canva – Design beautiful blog graphics plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-90860HIGHThe Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebVieEPSS 0.3%CVE-2025-64776MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%CVE-2026-113387HIGHThe Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public EPSS 0.3%CVE-2026-114173MEDIUMThe Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages. An unauthenEPSS 0.3%CVE-2025-66342HIGHA type confusion vulnerability exists in the EMF functionality of Canva Affinity. A specially crafted EMF file can trigger this vulnerabilitEPSS 0.3%CVE-2025-66503MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%CVE-2025-62500MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%CVE-2026-22882MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%CVE-2025-61979MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%CVE-2025-47873MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%CVE-2025-66617MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%CVE-2025-66633MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%CVE-2025-58427MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%CVE-2025-66000MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%CVE-2026-20726MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%CVE-2025-64733MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%CVE-2025-66042MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%