Beveiligingsadvies

CVE-2025-12792

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-11-18 00:18:00

Laatst bijgewerkt 2025-11-18 16:35:38

Toegewezen door Bugcrowd

CVSS-score 3.2

Status PUBLISHED

Beschrijving

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC (Transparency, Consent, and Control) permissions assigned to Canva.

← Alle CVE's bekijken Bekijk op cve.org ↗