VYPR

Affinity Desktop

by Canva

CVEs (1)

  • CVE-2026-96395LowOct 9, 2026
    risk 0.23cvss 3.6epss —

    The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document…