ZDI-CAN-28646 HIGH 7.8 Upcoming Dec 24, 2025

Krita

Krita is a popular open-source digital painting and illustration software used by artists and designers. This high-severity vulnerability requires local access and user interaction to exploit, but once triggered it grants an attacker high-level permissions to compromise confidentiality, integrity, and availability of the affected system. Security teams should monitor for exploitation attempts targeting Krita users and prepare patches once the vendor releases a fix by April 23, 2026.

Advisory Details
Researcher Discovered by: Anonymous
Reported December 24, 2025
Deadline April 23, 2026 6d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy