Figma

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Figma records in CISA KEV

No Figma vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Desktop · all components

TI-2025-35417 CVE-2025-56803 · GHSA-jj2f-fq9g-62qj

HIGH 72

Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.01067 Published 2025-09-03 No fix listed CWE-78