CVE-2026-85085
Last modified
CVE-2026-85085 is a critical-severity vulnerability rated 9.6/10 on the CVSS scale. The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView. A threat actor who controls the page loaded by the user is able to communicate with Canva using the user’s session..
Description
The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView. A threat actor who controls the page loaded by the user is able to communicate with Canva using the user’s session.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Canva | Canva | < 2.376.0 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-85085?
How severe is CVE-2026-85085?
How do I fix CVE-2026-85085?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-85061MapLibre GL JS is an interactive vector tile map library for…10
- CVE-2026-85062Colord is a tiny yet powerful tool for high-performance colo…6.9
- CVE-2026-85063node-csv is a full-featured CSV parser with a simple API tha…6.9
- CVE-2026-8507Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have o…9.8
- CVE-2026-8508An improper authentication vulnerability in the "social_logi…6.5
- CVE-2026-85084Out-of-bounds Write and Improper Validation of Array Index v…6.3
- CVE-2026-85089FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transm…6.5
- CVE-2026-8509Heap buffer overflow in WebML in Google Chrome prior to 148.…8.8
- CVE-2026-85090FreeRDP before 3.31.0 contains a heap out-of-bounds read vul…5.4
- CVE-2026-85091zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer ov…7.4
- CVE-2026-85092LiME through 1.12.0 fails to validate the disk acquisition o…6.6
- CVE-2026-85093Cheshire Cat AI's GET /memory/collections/{collection_id}/po…6.5
Are you affected by CVE-2026-85085?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST