Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-66342 1 Canva 1 Affinity 2026-03-24 7.8 High
A type confusion vulnerability exists in the EMF functionality of Canva Affinity. A specially crafted EMF file can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution.
CVE-2026-22882 1 Canva 1 Affinity 2026-03-24 6.1 Medium
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.