CVE Intelligence

Canva vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Canva products: 32 record(s), with severity, exploitation and fixes.

Affinity 27Canva 5

Exploited only (KEV) →

CVE-2025-62500 High · 7.1 CWE-125 Mar 17, 2026
Out-of-bounds Read in Canva Affinity
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
CVE-2025-62403 High · 7.1 CWE-125 Mar 17, 2026
Out-of-bounds Read in Canva Affinity
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
CVE-2025-61979 High · 7.1 CWE-125 Mar 17, 2026
Out-of-bounds Read in Canva Affinity
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
CVE-2025-61952 High · 7.1 CWE-125 Mar 17, 2026
Out-of-bounds Read in Canva Affinity
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
CVE-2025-58427 High · 7.1 CWE-125 Mar 17, 2026
Out-of-bounds Read in Canva Affinity
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
CVE-2025-47873 High · 7.1 CWE-125 Mar 17, 2026
Out-of-bounds Read in Canva Affinity
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
CVE-2025-12792 Low · 3.2 CWE-276 Nov 17, 2025
Incorrect Default Permissions in Canva
The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC (Transparency, Consent, and Control) permissions assigned to Canva.