Known Vulnerabilities for Canvas by Coolpad
Listed below are 1 of the newest known vulnerabilities associated with "Canvas" by "Coolpad".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-113253 json | Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside t... | Not Provided | 2026-10-20 | 2026-10-21 |
| CVE-2026-113154 json | Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrar... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-112992 json | Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrar... | Not Provided | 2026-10-20 | 2026-10-22 |
| CVE-2026-112845 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jory Hogeveen Off-Canva... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-112399 json | Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canv... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-110154 json | Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary c... | Not Provided | 2026-10-13 | 2026-10-15 |
| CVE-2026-101883 json | OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.present capability ... | Not Provided | 2026-09-30 | 2026-10-02 |
| CVE-2026-100554 json | OpenClaw (npm package 'openclaw') versions >= 2026.5.12 and < 2026.8.1 do not immediately invalidate Canvas HTTP authorizatio... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-94094 json | A flaw has been found in OpenClaw up to 2026.9.5. Affected is the function createCanvasHostHandler of the file extensions/can... | Not Provided | 2026-09-20 | 2026-09-22 |
| CVE-2026-93660 json | SQLBot through 1.10.1 fails to verify dashboard ownership in update_resource and update_canvas endpoints, allowing authentica... | Not Provided | 2026-09-18 | 2026-09-22 |