Canva Affinity vulnerabilities

Newest CVEs

• CVE-2026-103220

  The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing raster image data in Affinity…

  canva · affinity

  Medium4.5
• CVE-2026-101130

  The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of strings in Affinity…

  canva · affinity

  Low3.6
• CVE-2026-101094

  The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when parsing text in…

  canva · affinity

  Low3.6
• CVE-2026-96396

  The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when generating QuickLook…

  canva · affinity

  Medium4.9
• CVE-2026-96395

  The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook thumbnails and…

  canva · affinity

  Low3.6
• CVE-2026-96394

  The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pixel data when…

  canva · affinity

  Low2.9
• CVE-2026-96393

  The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, leading to an…

  canva · affinity

  Low3.6
• CVE-2026-81546

  The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity document files leading…

  Canva · Affinity

  High7.7
• CVE-2025-66342

  A type confusion vulnerability exists in the EMF functionality of Canva Affinity. A specially crafted EMF file can trigger this vulnerability, which can lead…

  Canva · Affinity

  High7.8
• CVE-2025-62500

  An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this…

  Canva · Affinity

  Medium6.1