Vulnerabilidades de Canva
CVEs publicadas que afetam produtos de Canva: 27 registro(s), com severidade, exploração e correções.
CVE-2025-47873
Alta · 7.1
CWE-125 17/03/2026
Out-of-bounds Read em Canva Affinity
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
CVE-2025-12792
Baixa · 3.2
CWE-276 17/11/2025
Incorrect Default Permissions em Canva
The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC (Transparency, Consent, and Control) permissions assigned to Canva.