ZDI-CAN-28656 HIGH 7.8 Upcoming Dec 24, 2025

Krita

Krita is a popular open-source digital painting and illustration software. This high-severity vulnerability requires local access with user interaction but requires no authentication, and successfully exploiting it could allow an attacker to read sensitive data, modify files, or crash the application. Security teams should monitor for patches from Krita and be alert for suspicious activity on systems running the software, particularly if users have been socially engineered into opening malicious files.

Advisory Details
Researcher Discovered by: Anonymous
Reported December 24, 2025
Deadline April 23, 2026 6d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy