← Back to Dashboard

CVE-2026-90860

HIGH NVD
CVSS Score
7.1
Severity
HIGH
Source
NVD
Published
Sep 21, 2026
Description

The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session.

View Full Details ← Back