Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-17 | 1 | General1 |
| 2026-03-18 | 1 | Disclosure1 |
CVE-2026-20726 Out-of-Bounds Read Vulnerability in Canva Affinity EMF Functionality https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20726
Post summary
The text announces CVE-2026-20726 as an out-of-bounds read vulnerability in Canva Affinity EMF functionality, with no PoC, exploit, or patch details provided.
CVE-2026-20726 An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerabi… https://www.cve.org/CVERecord?id=CVE-2026-20726
Post summary
The tweet announces CVE-2026-20726, an out-of-bounds read in Canva Affinity’s EMF feature that can be exploited by specially crafted EMF files, but offers no PoC, exploit code, active exploitation evidence, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | canva | affinity | - | windows | - |