Read the docs

Corel

Records54All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high25CVSS 7.0–8.9

Exploited now

Corel records in CISA KEV

No Corel vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

54 records

Priority MEDIUM 51

Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute arbitrary code via a long printer selection (PRS) name in a Wordperfect document.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08715 Published 2007-03-28 No fix listed CWE-119
Priority MEDIUM 48

Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05108 Published 2014-06-05 No fix listed
TI-2017-02025 CVE-2017-2804 · GHSA-hcqp-p6hj-h83v

Out-of-bounds write in Corel PHOTO-PAINT

Priority MEDIUM 40

A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01178 Published 2018-04-24 No fix listed CWE-787
TI-2017-02024 CVE-2017-2803 · GHSA-rm4h-q62w-77vw

Out-of-bounds write in Corel PHOTO-PAINT

Priority MEDIUM 40

A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01126 Published 2018-04-24 No fix listed CWE-787
Priority MEDIUM 40

NOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other versions, Corel getPlus Download Manager before 1.5.0.48, and possibly other products, installs NOS\bin\getPlus_HelperSvc.exe…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.05596 Published 2009-07-21 No fix listed CWE-264
TI-2016-07405 CVE-2016-9043 · GHSA-m535-3h2v-5g4r

Out-of-bounds write in CorelDRAW

Priority LOW 39

An out of bound write vulnerability exists in the EMF parsing functionality of CorelDRAW X8 (CdrGfx - Corel Graphics Engine (64-Bit) - 18.1.0.661).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02593 Published 2018-04-24 No fix listed CWE-787
Priority LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00881 Published 2023-03-29 No fix listed CWE-787
Priority LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00881 Published 2023-03-29 No fix listed CWE-787
Priority LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00881 Published 2023-03-29 No fix listed CWE-125
Priority LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00881 Published 2023-03-29 No fix listed CWE-787
Priority LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00934 Published 2023-03-29 No fix listed CWE-121
Load more
Open these records in search →