CA
Product
Canva
by Canva · last CVE Sep 21, 2026
5
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 1
Watch

Add Canva to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-85094
8.8
0%
Sep 4
The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView
Affected: before 2.376.0
CVE-2026-90860
7.1
0%
Sep 21
The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView
Affected: before 1.15.1
Showing 2