ZDI-CAN-28785 HIGH 7.8 Upcoming Feb 06, 2026

Krita

Krita is a popular open-source digital painting and illustration software. This high-severity vulnerability requires local access and user interaction to exploit, but once triggered it grants an attacker high-level control over confidentiality, integrity, and availability of the affected system. Security teams should monitor for patches following the June 2026 vendor deadline and consider restricting file execution from untrusted sources in Krita until an update is available.

Advisory Details
Researcher Anonymous
Reported February 06, 2026
Deadline June 06, 2026 51d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy