CVE-2025-12792

Canva / Canva PUBLISHED

Description (CNA)

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC (Transparency, Consent, and Control) permissions assigned to Canva.

Affected (CNA)

Vendor / product	Versions
Canva / Canva	affected 0 before 1.117.1

CWE

CWE-276

References

https://trust.canva.com/?tcuUid=1e77a34b-f586-450b-b30d-b6e17d15b443

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.