Vulnerabilidades em canva
36 resultadosAnálise Vexday
Canva apresenta 7 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando descobertas recentes em seus produtos. Nenhuma vulnerabilidade está sob exploração ativa conhecida (KEV) e não há falhas críticas (CVSS), reduzindo o risco imediato. A fraqueza predominante (CWE-126: leitura fora dos limites) sugere problemas de validação de limites em memória, típicos de implementações em linguagens de baixo nível, demandando monitoramento das correções previstas.
CVE-2026-92839MEDIUMCanva Desktop before v1.125.0 performed double decoding in the deeplink handler. A threat actor could cause the application to load arbitrarEPSS 0.3%CVE-2025-61952MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%CVE-2025-64735MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%CVE-2025-62403MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%CVE-2025-65119MEDIUMAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coEPSS 0.3%CVE-2025-64301HIGHAn out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker cEPSS 0.3%CVE-2026-113409MEDIUMThe Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to stored cross-site scriptiEPSS 0.2%CVE-2026-81546HIGHThe Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity documEPSS 0.1%CVE-2025-12792LOWThe Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor withEPSS 0.1%CVE-2026-96394LOWThe Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the piEPSS 0.1%CVE-2026-101130LOWThe Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of stringEPSS 0.1%CVE-2026-101094LOWThe Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when parEPSS 0.1%CVE-2026-96396MEDIUMThe Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when geEPSS 0.1%CVE-2026-103220MEDIUMThe Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing raster image datEPSS 0.1%CVE-2026-96395LOWThe Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook tEPSS 0.1%CVE-2026-96393LOWThe Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files,EPSS 0.1%