CVE-2026-101130

The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in Affinity, coul...

CVE-2026-103220

The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing raster image data in Affinity document files, leading to an out-of-bounds read and the dereference of an untrusted pointer. A threat actor could craft an Affinity document tha...

CVE-2026-101094

The Affinity by Canva application before 3.3.1 October 2026 release did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in...

CVE-2026-98221

A flaw was found in the Linux kernel's trusted keys subsystem. A local user can exploit this vulnerability by submitting a specially crafted trusted key payload. Because the kernel validates boundaries against the encoded data length rather than the decoded buffer size, an out-of-bounds memory re...

nginx-CVE-2017-7529

Nginx 캐시 범위 초과 읽기 취약점 CVE-2017-7529 취약점 원리 참고 자료: https://cert.360.cn/detailnews.html?id=b879782fbad4a7f773b6c18490d67ac7 http://galaxylab.org/cve-2017-7529-nginx%E6%95%B4%E6%95%B0%E6%BA%A2%E5%87%BA%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/ Nginx는 리버스 프록시 사이트를 운영할 때 일반적으로 일부 파일, 특히 정적 파일을 캐시합니다. 캐시된 부...

CVE-2026-66491

PhocaCommander の getSource を介した任意ファイル読み取り PhocaCommander ≤ 6.1.3 — 認証済み管理者によるパストラバーサル、CSRF 不要 概要 PhocaCommander のファイルエディタエンドポイントには、任意ファイル読み取りの脆弱性が存在します。getSource 関数は、base64 エンコードされた filename パラメータをデコードし、パス包含チェックなしで直接 filegetcontents に渡します。認証済み管理者は、GET リクエストを送信するだけで、Web...

CVE-2026-103220

The Affinity by Canva application, in versions prior to 3.3.1 (October 2026 release), is vulnerable to an out-of-bounds block-array read. The root cause is inadequate bounds checking when parsing raster image data within Affinity document files, which can lead to an out-of-bounds read and the der...

EUVD-2026-95754

The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing raster image data in Affinity document files, leading to an out-of-bounds read and the dereference of an untrusted pointer. A threat actor could craft an Affinity document tha...

CVE-2026-103220

The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing raster image data in Affinity document files, leading to an out-of-bounds read and the dereference of an untrusted pointer. A threat actor could craft an Affinity document tha...

CVE-2021-21017

CVE-2021-21017 또 다른 Adobe Reader Byte Order Mark 버그가 아닙니다 : IA32 plugin, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl != char 0x0 && relurl...

CVE-2026-101130

The Affinity by Canva application (versions prior to 3.3.1 , October 2026 release) is vulnerable to a heap buffer over-read due to inadequate bounds checking when parsing arrays of strings in Affinity document files. Specifically, the flaw exists in Kernel::InSerialiser::LoadTypes involving a pro...

EUVD-2026-95753

The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in Affinity, coul...

CVE-2026-101130

The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in Affinity, coul...

CVE-2026-101094

The Affinity by Canva application, prior to version 3.3.1 (October 2026 release), contains an unbounded over-read vulnerability in Story::GlyphString::Add . The issue stems from the software's failure to correctly handle incomplete UTF-8 character sequences while parsing text within Affinity docu...

EUVD-2026-95752

The Affinity by Canva application before 3.3.1 October 2026 release did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in...

CVE-2026-101094

The Affinity by Canva application before 3.3.1 October 2026 release did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in...

cve-2026-85706

cve-2026-85706 GitLab CE/EE における未認証の任意ローカルファイル読み取り。18.7～19.1.7、19.2.0～19.2.5、19.3.0～19.3.1 に影響。19.1.8 / 19.2.6 / 19.3.2 で修正済み（2026-09-10）。CVSS 10.0、実環境で悪用が報告されている。原報告は s3ntago によるもので、このリポジトリは私の writeup と PoC にすぎない。 免責事項 この PoC...

EUVD-2026-95750

The Affinity by Canva app for macOS before 3.3.1 October 2026 release did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document that, when displayed ...

CVE-2026-96395

The Affinity by Canva app for macOS (versions prior to 3.3.1 ) is vulnerable to a heap memory disclosure due to an unchecked palette index in the QuickLook extensions . This flaw occurs because the application fails to perform adequate bounds checking when generating QuickLook thumbnails and prev...

CVE-2026-96395

The Affinity by Canva app for macOS before 3.3.1 October 2026 release did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document that, when displayed ...