Approved changes feed: RSS · Atom

cpe:2.3:a:canva:affinity:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCanva (b2d14882-ae1a-5593-b015-47dd6dc4fc96)
ProductAffinity (08945e81-cb67-5353-a135-20de854f4b7b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-22882 vulnerable 2026-06-08 07:51:14.081620 Details available
MEDIUM (6.1)
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
Published: 2026-03-17T18:52:25.119Z
Updated: 2026-03-18T17:00:25.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20726 vulnerable 2026-06-08 07:49:12.469280 Details available
MEDIUM (6.1)
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
Published: 2026-03-17T18:52:26.501Z
Updated: 2026-03-18T17:00:26.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66633 vulnerable 2026-06-08 07:41:19.375620 Details available
MEDIUM (6.1)
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
Published: 2026-03-17T18:52:39.971Z
Updated: 2026-03-18T17:00:17.155Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66617 vulnerable 2026-06-08 07:41:19.343687 Details available
MEDIUM (6.1)
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
Published: 2026-03-17T18:52:36.982Z
Updated: 2026-03-18T17:00:19.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66503 vulnerable 2026-06-08 07:41:19.072859 Details available
MEDIUM (6.1)
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
Published: 2026-03-17T18:52:32.543Z
Updated: 2026-03-18T17:00:22.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66342 vulnerable 2026-06-08 07:41:18.778131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66042 vulnerable 2026-06-08 07:39:21.156701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66000 vulnerable 2026-06-08 07:39:21.112752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-65119 vulnerable 2026-06-08 07:39:20.747608 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64776 vulnerable 2026-06-08 07:39:20.280933 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64735 vulnerable 2026-06-08 07:39:20.210550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64733 vulnerable 2026-06-08 07:39:20.208554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64301 vulnerable 2026-06-08 07:39:18.342852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62500 vulnerable 2026-06-08 07:37:29.866267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62403 vulnerable 2026-06-08 07:37:29.629652 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61979 vulnerable 2026-06-08 07:37:28.492903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61952 vulnerable 2026-06-08 07:37:28.451413 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58427 vulnerable 2026-06-08 07:35:18.257192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47873 vulnerable 2026-06-08 07:27:14.965397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.