Approved changes feed: RSS · Atom

cpe:2.3:a:canva:affinity:*:*:*:*:*:windows:*:*

part: a version: * update: *

VendorCanva (b2d14882-ae1a-5593-b015-47dd6dc4fc96)
ProductAffinity (08945e81-cb67-5353-a135-20de854f4b7b)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-22882 vulnerable 2026-06-08 07:51:14.082530 Details available
MEDIUM (6.1)
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
Published: 2026-03-17T18:52:25.119Z
Updated: 2026-03-18T17:00:25.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20726 vulnerable 2026-06-08 07:49:12.470223 Details available
MEDIUM (6.1)
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
Published: 2026-03-17T18:52:26.501Z
Updated: 2026-03-18T17:00:26.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66633 vulnerable 2026-06-08 07:41:19.375663 Details available
MEDIUM (6.1)
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
Published: 2026-03-17T18:52:39.971Z
Updated: 2026-03-18T17:00:17.155Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66617 vulnerable 2026-06-08 07:41:19.343829 Details available
MEDIUM (6.1)
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
Published: 2026-03-17T18:52:36.982Z
Updated: 2026-03-18T17:00:19.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66503 vulnerable 2026-06-08 07:41:19.073000 Details available
MEDIUM (6.1)
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
Published: 2026-03-17T18:52:32.543Z
Updated: 2026-03-18T17:00:22.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66342 vulnerable 2026-06-08 07:41:18.779373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66042 vulnerable 2026-06-08 07:39:21.156741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66000 vulnerable 2026-06-08 07:39:21.112793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-65119 vulnerable 2026-06-08 07:39:20.747728 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64776 vulnerable 2026-06-08 07:39:20.280973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64735 vulnerable 2026-06-08 07:39:20.210725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64733 vulnerable 2026-06-08 07:39:20.208744 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64301 vulnerable 2026-06-08 07:39:18.350233 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62500 vulnerable 2026-06-08 07:37:29.866309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62403 vulnerable 2026-06-08 07:37:29.629694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61979 vulnerable 2026-06-08 07:37:28.493025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61952 vulnerable 2026-06-08 07:37:28.452240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58427 vulnerable 2026-06-08 07:35:18.258556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47873 vulnerable 2026-06-08 07:27:14.966283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.