CA
Product
Canva
5
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 1
Watch
Add Canva to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-85085 | 9.6 | Sep 4 | The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView Affected: before 2.376.0 |
| CVE-2026-85094 | 8.8 | Sep 4 | The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView Affected: before 2.376.0 |
| CVE-2026-90860 | 7.1 | Sep 21 | The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView Affected: before 1.15.1 |
| CVE-2026-92839 | 4.3 | Sep 17 | Canva Desktop before v1.125.0 performed double decoding in the deeplink handler Affected: before 1.125.0 |
| CVE-2025-12792 | 3.2 | Nov 18 | The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime Affected: before 1.117.1 |
Showing 5