Read the docs

Canva

Records36All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high24CVSS 7.0–8.9

Exploited now

Canva records in CISA KEV

No Canva vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

19 records in Affinity · all components

TI-2025-40808 CVE-2025-66342 · GHSA-8xhw-2gcw-668p

Type confusion in Canva Affinity

Priority LOW 36

A type confusion vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00289 Published 2026-03-17 No fix listed CWE-843
TI-2025-39740 CVE-2025-64301 · GHSA-j9j4-56w3-rrvm

Out-of-bounds write in Canva Affinity

Priority LOW 36

An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0028 Published 2026-03-17 No fix listed CWE-787
TI-2026-18373 CVE-2026-22882 · GHSA-qxqv-4xpm-q2cv

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-03-17 No fix listed CWE-125
TI-2026-16773 CVE-2026-20726 · GHSA-2hcq-hhg4-gx7r

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-03-17 No fix listed CWE-125
TI-2025-41026 CVE-2025-66633 · GHSA-wj36-r8mg-8rvp

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-03-17 No fix listed CWE-125
TI-2025-41014 CVE-2025-66617 · GHSA-gvw9-v2v9-3w6x

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-03-17 No fix listed CWE-125
TI-2025-40927 CVE-2025-66503 · GHSA-3qp6-ggvj-j262

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-03-17 No fix listed CWE-125
TI-2025-40567 CVE-2025-66042 · GHSA-qpww-hm4r-j335

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-03-17 No fix listed CWE-125
TI-2025-40537 CVE-2025-66000 · GHSA-jpmc-hhx4-8qcx

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-03-17 No fix listed CWE-125
TI-2025-40271 CVE-2025-65119 · GHSA-9fmw-xq87-2x8h

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-03-17 No fix listed CWE-125
TI-2025-40111 CVE-2025-64776 · GHSA-mg85-gp4r-pg79

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00294 Published 2026-03-17 No fix listed CWE-125
TI-2025-40076 CVE-2025-64735 · GHSA-vhgm-mcfv-8mjr

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-03-17 No fix listed CWE-125
TI-2025-40074 CVE-2025-64733 · GHSA-wrfx-96cc-p945

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-03-17 No fix listed CWE-125
TI-2025-38742 CVE-2025-62500 · GHSA-x5g9-xhf2-hrj6

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-03-17 No fix listed CWE-125
TI-2025-38670 CVE-2025-62403 · GHSA-jrw3-vmvw-gw3c

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-03-17 No fix listed CWE-125
TI-2025-38311 CVE-2025-61979 · GHSA-hqq7-47xm-xc6w

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-03-17 No fix listed CWE-125
TI-2025-38296 CVE-2025-61952 · GHSA-pq86-6rrj-3fvx

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-03-17 No fix listed CWE-125
TI-2025-36187 CVE-2025-58427 · GHSA-fx6r-gr7m-2fch

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-03-17 No fix listed CWE-125
TI-2025-30297 CVE-2025-47873 · GHSA-r4jf-fm8v-q63p

Out-of-bounds read in Canva Affinity

Priority LOW 31

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00285 Published 2026-03-17 No fix listed CWE-125
Open these records in search →