https://vulnogram.org/ Most recent CVEs assigned by Canva (canva). https://vulnogram.org/seaview/icons/canva.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-103220 https://vulnogram.org/CVE-2026-103220 The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing raster image data in Affinity document files, leading to an out-of-bounds read and the dereference of an untrusted pointer. A… Medium Fri, 09 Oct 2026 12:47:21 GMT https://vulnogram.org/CVE-2026-101130 https://vulnogram.org/CVE-2026-101130 The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity docum… Low Fri, 09 Oct 2026 12:45:42 GMT https://vulnogram.org/CVE-2026-101094 https://vulnogram.org/CVE-2026-101094 The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affini… Low Fri, 09 Oct 2026 12:44:18 GMT https://vulnogram.org/CVE-2026-96396 https://vulnogram.org/CVE-2026-96396 The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a he… Medium Fri, 09 Oct 2026 12:43:03 GMT https://vulnogram.org/CVE-2026-96395 https://vulnogram.org/CVE-2026-96395 The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could… Low Fri, 09 Oct 2026 12:40:12 GMT https://vulnogram.org/CVE-2026-96394 https://vulnogram.org/CVE-2026-96394 The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bo… Low Fri, 09 Oct 2026 12:38:38 GMT https://vulnogram.org/CVE-2026-96393 https://vulnogram.org/CVE-2026-96393 The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, leading to an out-of-bounds pointer dereference. A threat actor could craft an Affinity document that, when o… Low Fri, 09 Oct 2026 12:35:48 GMT https://vulnogram.org/CVE-2026-90860 https://vulnogram.org/CVE-2026-90860 The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session. High Network Exploitable Mon, 21 Sep 2026 06:43:02 GMT https://vulnogram.org/CVE-2026-92839 https://vulnogram.org/CVE-2026-92839 Canva Desktop before v1.125.0 performed double decoding in the deeplink handler. A threat actor could cause the application to load arbitrary same-origin content under the user’s session. Medium Network Exploitable Thu, 17 Sep 2026 03:53:51 GMT https://vulnogram.org/CVE-2026-81546 https://vulnogram.org/CVE-2026-81546 The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buffer overflow. A threat actor could craft a Affinity document that when o… High Thu, 17 Sep 2026 01:39:59 GMT https://vulnogram.org/CVE-2026-85094 https://vulnogram.org/CVE-2026-85094 The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session. High Network Exploitable Fri, 04 Sep 2026 06:02:47 GMT https://vulnogram.org/CVE-2026-85085 https://vulnogram.org/CVE-2026-85085 The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView. A threat actor who controls the page loaded by the user is able to communicate with Canva using the user’s session. Critical Network Exploitable Fri, 04 Sep 2026 06:00:46 GMT