by Kastro
Paper/Archive/CVE-2026-85085

CVE-2026-85085

Canva Canva — The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView.

EPSS 0.4%CVSS 9.6
critical.is priorityof 100
36
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 33.3.333 × 206.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView. A threat actor who controls the page loaded by the user is able to communicate with Canva using the user’s session.

Affected

ProductAffectedFixed inSource
Canva< 2.376.02.376.0CNA

Scores by source

Canva (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

reftrust.canva.com/?tcuUid=be2ebc32-7053-4885-bf71-68771aa4589a