Affinity

Every one of the 27 is a mark on the map. Named now: 1 to 26, most at risk first.

1. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2025-64776Canva · CVSS 6.1 · 0.3% likely

   CWE-125

2. A type confusion vulnerability exists in the EMF functionality of Canva Affinity. A specially crafted EMF file can trigger this vulnerability, which can lead to memory corruption…CVE-2025-66342Canva · CVSS 7.8 · 0.3% likely

   CWE-843

3. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2026-22882Canva · CVSS 6.1 · 0.3% likely

   CWE-125

4. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2026-20726Canva · CVSS 6.1 · 0.3% likely

   CWE-125

5. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2025-66633Canva · CVSS 6.1 · 0.3% likely

   CWE-125

6. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2025-66617Canva · CVSS 6.1 · 0.3% likely

   CWE-125

7. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2025-66503Canva · CVSS 6.1 · 0.3% likely

   CWE-125

8. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2025-66042Canva · CVSS 6.1 · 0.3% likely

   CWE-125

9. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2025-66000Canva · CVSS 6.1 · 0.3% likely

   CWE-125

10. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2025-65119Canva · CVSS 6.1 · 0.3% likely

    CWE-125

11. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2025-64735Canva · CVSS 6.1 · 0.3% likely

    CWE-125

12. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2025-64733Canva · CVSS 6.1 · 0.3% likely

    CWE-125

13. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2025-62500Canva · CVSS 6.1 · 0.3% likely

    CWE-125

14. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2025-62403Canva · CVSS 6.1 · 0.3% likely

    CWE-125

15. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2025-61979Canva · CVSS 6.1 · 0.3% likely

    CWE-125

16. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2025-61952Canva · CVSS 6.1 · 0.3% likely

    CWE-125

17. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2025-58427Canva · CVSS 6.1 · 0.3% likely

    CWE-125

18. An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perfo…CVE-2025-47873Canva · CVSS 6.1 · 0.3% likely

    CWE-125

19. An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perf…CVE-2025-64301Canva · CVSS 7.8 · 0.3% likely

    CWE-787

20. The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buff…CVE-2026-81546Canva · CVSS 7.7 · 0.1% likely

    CWE-121

21. The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pixel data when generating QuickLook thum…CVE-2026-96394canva · CVSS 2.9 · 0.1% likely

    CWE-126

22. The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading t…CVE-2026-101130canva · CVSS 3.6 · 0.1% likely

    CWE-126

23. The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, l…CVE-2026-101094canva · CVSS 3.6 · 0.1% likely

    CWE-126

24. The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previ…CVE-2026-96396canva · CVSS 4.9 · 0.1% likely

    CWE-122

25. The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing raster image data in Affinity document files, leading t…CVE-2026-103220canva · CVSS 4.5 · 0.1% likely

    CWE-129

26. The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity docu…CVE-2026-96395canva · CVSS 3.6 · 0.1% likely

    CWE-125

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.