ZDI-CAN-28517 HIGH 7.8 Overdue Dec 04, 2025

Krita

Krita is a well-known open-source digital painting and illustration software application. This vulnerability has a high severity rating (7.8) and requires local access with user interaction to exploit, but once successful grants an attacker high-level permissions to compromise confidentiality, integrity, and availability of the system. Security teams should monitor for any unusual file access or execution behavior from Krita and ensure users update to patched versions once available, with a vendor deadline of April 3, 2026.

Advisory Details
Researcher Discovered by: Francis Provencher {PRL}
Reported December 04, 2025
Deadline April 03, 2026 14d overdue
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy