AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-12792

LOW · CVSS 3.2 EPSS 0.11%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-11-18 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 3.2. See the original NVD description below for full technical details.

CVE
CVE-2025-12792
Severity
LOW
CVSS
3.2
EPSS
0.11%

Original NVD Description

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC (Transparency, Consent, and Control) permissions assigned to Canva.