CVE-2026-96394 | Canva Affinity up to 3.3.0 Thumbnail Preview Extension out-of-bounds

October 9, 2026 Yanac

A vulnerability classified as critical was found in Canva Affinity up to 3.3.0. This issue affects some unknown processing of the component Thumbnail Preview Extension. Executing a manipulation can lead to out-of-bounds read.

This vulnerability is registered as CVE-2026-96394. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More