CVE-2026-85085 The Canva Android App before 2.376.0 allowed an… — CVE Notify — TG.ME

CVCVE Notify@cveNotify · 19.7K subscribersOpen in TelegramOpen

🚨 CVE-2026-85085
The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView. A threat actor who controls the page loaded by the user is able to communicate with Canva using the user’s session.

🎖@cveNotify

Canva

Canva Trust & Security Portal | Powered by SafeBase

See how Canva manages their security program with SafeBase.

t.me/cveNotify/284942

September 4, 2026 60