canva vulnerabilities

Recent CVEs affecting canva products. 19 tracked.

canva has 19 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 19. Most recent: 2026-03-17. Highest priority: CVE-2025-66342 (score 37/100).

• CVE-2026-22882 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2026-20726 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-66633 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-66617 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-66503 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-66342 HIGH 7.8 UPGRADE A type confusion vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-66042 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-66000 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-65119 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-64776 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-64735 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-64733 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-64301 HIGH 7.8 UPGRADE An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-62500 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-62403 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-61979 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-61952 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-58427 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity
• CVE-2025-47873 MEDIUM 6.1 UPGRADE An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity

FAQ

How do I fix canva vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is canva being exploited right now?

None of the tracked canva CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which canva CVE should I patch first?

CVE-2025-66342 currently ranks highest (37/100): A type confusion vulnerability exists in the EMF functionality of Canva Affinity.

Products

• affinity

RSS feed for canva · ← Back to latest CVEs