[ Vendor · 7 CVEs ]
canva
CVEs affecting canva published in the last 30 days, plus any canva CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-96396 | 9 Oct 2026 | CVSS 4.9 | canva affinityThe Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when generating… | |
| CVE-2026-96393 | 9 Oct 2026 | CVSS 3.6 | canva affinityThe Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, leading… | |
| CVE-2026-96394 | 9 Oct 2026 | CVSS 2.9 | canva affinityThe Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pixel data… | |
| CVE-2026-96395 | 9 Oct 2026 | CVSS 3.6 | canva affinityThe Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook thumbnails… | |
| CVE-2026-101130 | 9 Oct 2026 | CVSS 3.6 | canva affinityThe Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of strings in… | |
| CVE-2026-103220 | 9 Oct 2026 | CVSS 4.5 | canva affinityThe Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing raster image data in… | |
| CVE-2026-101094 | 9 Oct 2026 | CVSS 3.6 | canva affinityThe Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when parsing text… |