Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 27

Export CSV
CVE-2025-64301

Out‑of‑Bounds Write in Canva Affinity EMF Processing Leading to Code Execution

An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out‑of‑bounds write, potentially leading to code execution.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canva
Products
Affinity
CVE-2025-66000

Out-of-Bounds Read Vulnerability in Canva Affinity EMF Functionality

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Canva
Products
Affinity
CVE-2025-64733

Out‑of‑Bounds Read in Affinity EMF Processing leads to Data Disclosure

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Canva
Products
Affinity
CVE-2025-61979

Out-of-Bounds Read in Canva Affinity EMF Functionality Leading to Sensitive Data Disclosure

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Canva
Products
Affinity
CVE-2025-62500

Out-of-Bounds Read in Canva Affinity EMF Handling

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Canva
Products
Affinity
CVE-2025-66342

Memory Corruption via Type Confusion in Canva Affinity EMF Processor Leading to Arbitrary Code Execution

A type confusion vulnerability exists in the EMF functionality of Canva Affinity. A specially crafted EMF file can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canva
Products
Affinity
CVE-2026-22882

Canva Affinity Out-of-Bounds Read via EMF File Leading to Sensitive Information Disclosure

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Canva
Products
Affinity