Corel vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2022-43618 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.High 7.8 · Mar 29, 2023
• CVE-2022-43617 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.High 7.8 · Mar 29, 2023
• CVE-2022-43616 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.High 7.8 · Mar 29, 2023
• CVE-2022-43614 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.High 7.8 · Mar 29, 2023
• CVE-2022-43613 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.High 7.8 · Mar 29, 2023
• CVE-2021-38110 Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.High 7.8 · Oct 1, 2021
• CVE-2021-38101 CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.High 7.8 · Oct 1, 2021
• CVE-2021-38100 Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.High 7.8 · Oct 1, 2021
• CVE-2021-38098 Corel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vulnerability when parsing a crafted file.High 7.8 · Oct 1, 2021
• CVE-2021-38103 IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.High 7.8 · Oct 1, 2021
• CVE-2021-38099 CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.High 7.8 · Oct 1, 2021
• CVE-2021-38096 Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.High 7.8 · Oct 1, 2021
• CVE-2021-38097 Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.High 7.8 · Oct 1, 2021
• CVE-2019-6114 An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119.High 8.8 · Jun 19, 2019
• CVE-2017-2804 A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661.High 8.8 · Apr 24, 2018
• CVE-2017-2803 A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661.High 8.8 · Apr 24, 2018
• CVE-2016-9043 An out of bound write vulnerability exists in the EMF parsing functionality of CorelDRAW X8 (CdrGfx - Corel Graphics Engine (64-Bit) - 18.1.0.661).High 7.8 · Apr 24, 2018
• CVE-2016-8730 An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661.High 7.8 · Apr 24, 2018
• CVE-2014-8393 DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion.High 7.8 · Aug 28, 2017
• CVE-2013-0733 Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct High 9.3 · Jun 5, 2014
• CVE-2013-3248 Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working dHigh 9.3 · Oct 3, 2013
• CVE-2013-0742 Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a loHigh 9.3 · Oct 3, 2013
• CVE-2009-4251 Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrary code via a craftedHigh 9.3 · Dec 9, 2009
• CVE-2007-2921 Multiple buffer overflows in acgm.dll in the Corel / Micrografx ActiveCGM Browser ActiveX control before 7.1.4.19 allow remote attackers to execute arbitrary coHigh 9.3 · Jun 14, 2007
• CVE-2007-2366 Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file.High 7.4 · Apr 30, 2007