Corel
36 CVEs across 28 Corel products. Browse Corel vulnerabilities, severities, and proof-of-concept exploits.
Corel products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-43618 | High | 7.8 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction i… |
CVE-2022-43617 | High | 7.8 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction i… |
CVE-2022-43616 | High | 7.8 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction i… |
CVE-2022-43615 | Medium | 5.5 | 2023-03-29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User inter… |
CVE-2022-43614 | High | 7.8 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction i… |
CVE-2022-43613 | High | 7.8 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction i… |
CVE-2022-43612 | Medium | 5.5 | 2023-03-29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User inter… |
CVE-2022-43611 | Medium | 5.5 | 2023-03-29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User inter… |
CVE-2022-43610 | Medium | 5.5 | 2023-03-29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User inter… |
CVE-2022-46662 | Medium | 6.7 | 2022-12-21 | Roxio Creator LJB starts another program with an unquoted file path. Since a registered Windows service path contains spaces and are unquoted, if a malicious e… |
CVE-2021-38109 | Medium | 5.5 | 2021-10-02 | Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage t… |
CVE-2021-38108 | Medium | 5.5 | 2021-10-02 | Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated att… |
CVE-2021-38107 | Medium | 5.5 | 2021-10-02 | CdrCore.dll in Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker c… |
CVE-2021-38110 | High | 7.8 | 2021-10-01 | Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated at… |
CVE-2021-38106 | Medium | 5.5 | 2021-10-01 | UAX200.dll in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker c… |
CVE-2021-38105 | Medium | 5.5 | 2021-10-01 | IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker c… |
CVE-2021-38102 | Medium | 5.5 | 2021-10-01 | IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker c… |
CVE-2021-38101 | High | 7.8 | 2021-10-01 | CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated att… |
CVE-2021-38100 | High | 7.8 | 2021-10-01 | Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could le… |
CVE-2021-38098 | High | 7.8 | 2021-10-01 | Corel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerabil… |
CVE-2021-38104 | Medium | 5.5 | 2021-10-01 | IPPP72.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker c… |
CVE-2021-38103 | High | 7.8 | 2021-10-01 | IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker… |
CVE-2021-38099 | High | 7.8 | 2021-10-01 | CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated att… |
CVE-2021-38096 | High | 7.8 | 2021-10-01 | Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could lever… |
CVE-2021-38097 | High | 7.8 | 2021-10-01 | Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulne… |
CVE-2012-4900 | Medium | 5.5 | 2020-01-23 | Corel WordPerfect Office X6 16.0.0.388 has a DoS Vulnerability via untrusted pointer dereference |
CVE-2019-6114 | High | 8.8 | 2019-06-19 | An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119. An integer overflow in the jp2 parsing library allows an attacker to overwrite memory and to ex… |
CVE-2017-2804 | High | 8.8 | 2018-04-24 | A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted TIFF file can cause a… |
CVE-2017-2803 | High | 8.8 | 2018-04-24 | A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661. A specially crafted TIFF file can… |
CVE-2016-9043 | High | 7.8 | 2018-04-24 | An out of bound write vulnerability exists in the EMF parsing functionality of CorelDRAW X8 (CdrGfx - Corel Graphics Engine (64-Bit) - 18.1.0.661). A specially… |
CVE-2016-8730 | High | 7.8 | 2018-04-24 | An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted GIF file can… |
CVE-2014-8393 | High | 7.8 | 2017-08-29 | DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion. |
CVE-2015-6948 | | 2015-09-15 | Heap-based buffer overflow in the Microsoft Word document conversion feature in Corel WordPerfect allows remote attackers to execute arbitrary code via a craft… | |
CVE-2014-8398 | | 2015-01-15 | Multiple untrusted search path vulnerabilities in Corel FastFlick allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan ho… | |
CVE-2014-8397 | | 2015-01-15 | Untrusted search path vulnerability in Corel VideoStudio PRO X7 or FastFlick allows local users to execute arbitrary code and conduct DLL hijacking attacks via… | |
CVE-2014-8396 | | 2015-01-15 | Untrusted search path vulnerability in Corel PDF Fusion allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse quser… | |
CVE-2014-8395 | | 2015-01-15 | Untrusted search path vulnerability in Corel Painter 2015 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wac… | |
CVE-2014-8394 | | 2015-01-15 | Multiple untrusted search path vulnerabilities in Corel CAD 2014 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan hor… | |
CVE-2013-0733 | | 2014-06-05 | Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct… | |
CVE-2012-4728 | | 2014-06-05 | The (1) QProGetNotebookWindowHandle and (2) Ordinal132 functions in QPW160.dll in Corel Quattro Pro X6 Standard Edition 16.0.0.388 and earlier allows remote at… | |
CVE-2013-3248 | | 2013-10-03 | Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working… | |
CVE-2013-0742 | | 2013-10-03 | Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a l… | |
CVE-2010-5240 | | 2012-09-07 | Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse (1) dwm… | |
CVE-2009-4251 | | 2009-12-10 | Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrary code via a crafte… | |
CVE-2009-2564 | | 2009-07-21 | NOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other versions, Corel getPlus Download Manager before 1.5.0.48, and po… | |
CVE-2007-2921 | | 2007-06-14 | Multiple buffer overflows in acgm.dll in the Corel / Micrografx ActiveCGM Browser ActiveX control before 7.1.4.19 allow remote attackers to execute arbitrary c… | |
CVE-2007-2366 | | 2007-04-30 | Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file. | |
CVE-2007-2209 | | 2007-04-24 | Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows… | |
CVE-2007-1735 | | 2007-03-28 | Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute arbitrary code via a long printer sele… | |
CVE-2000-0193 | | 2000-03-02 | The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges. | |
CVE-2000-0195 | | 2000-02-24 | setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file. | |
CVE-2000-0194 | | 2000-02-24 | buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters. | |
CVE-2000-0048 | | 2000-01-12 | get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp program. | |
CVE-1999-1173 | | 1998-12-18 | Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to (1) modify Word Perfect behav… |