CVEs published by Canva

CVEs published by Canva (CVE Numbering Authority). 8 tracked.

CVE-2026-96396 MEDIUM 4.9 The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the s
CVE-2026-96395 LOW 3.6 The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checki
CVE-2026-96394 LOW 2.9 The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensi
CVE-2026-96393 LOW 3.6 The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when pa
CVE-2026-103220 MEDIUM 4.5 The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking
CVE-2026-101130 LOW 3.6 The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking
CVE-2026-101094 LOW 3.6 The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-
CVE-2026-90860 HIGH 7.1 The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin