Canva vulnerabilities
36 CVEs and advisories name Canva as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-65119An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
- CVE-2025-62403An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
- CVE-2026-20726An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
- CVE-2026-22882An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
- CVE-2025-12792The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime.
- CVE-2024-32545WordPress Canva – Design beautiful blog graphics plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability