Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Corel

First CVE: Dec 18, 1998Active for: 28 yearsTotal CVEs: 54
45.4
VTI Score
High

Corel operates a moderately represented portfolio of consumer and professional creative applications, including CorelDRAW, Paint Shop Pro, and PDF Fusion, alongside Linux distributions. Vulnerabilities affecting the vendor recur through memory-safety and bounds-handling weakness classes—out-of-bounds reads and writes, integer overflows, and buffer-boundary violations—that reflect the native-code implementation typical of desktop graphics and document-processing software. The vendor's disclosures frequently acquire public exploit code, making timely patching important for users of affected applications. Defenders should prioritize updates for widely deployed instances of the creative suite, particularly in environments handling untrusted documents or user input; current exploitation activity and exposure counts are shown alongside this summary.

FAUCET AI Generated
54
Total CVEs
More Total CVEs than 99% of tracked vendors
0.1
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 1% of tracked vendors
6.9
Avg CVSS Score
Higher Avg CVSS Score than 48% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Corel over time

Volume of CVEsAvg CVSS Base Score
First CVE
Dec 18, 1998
27 years ago
Most Recent CVE
Mar 29, 2023
1,213 days ago

Products(25 total)

Top CVEs

Signals from CVEs in this vendor scope (54 CVEs).

54 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2013-0742HIGH
Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long ZIP directory ent
Oct 3, 20139.356NOYES
CVE-2013-3248HIGH
Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonst
Oct 3, 20139.351NOYES
CVE-2007-2366HIGH
Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file.
Apr 30, 20077.446NOYES
CVE-2009-4251HIGH
Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrary code via a crafted PNG file. NOTE: th
Dec 10, 20099.336NOYES
CVE-2007-1735HIGH
Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute arbitrary code via a long printer selection (PRS) name in a
Mar 28, 20079.336NOYES
CVE-2007-2209MEDIUM
Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote
Apr 24, 20076.834NOYES
CVE-2014-8393HIGH
DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion.
Aug 29, 20177.832NOYES
CVE-2009-2564HIGH
NOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other versions, Corel getPlus Download Manager before 1.5.0.48, and possibly other products
Jul 21, 20097.231NOYES
CVE-2010-5240MEDIUM
Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) CrlRib
Sep 7, 20126.930NOYES
CVE-2013-0733HIGH
Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL hijacking attack
Jun 5, 20149.329NONO
View all 54 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products54 CVEs
41%
57%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local31 (57.4%)
Network1 (1.9%)
Unknown22 (40.7%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low32 (59.3%)
High0 (0.0%)
Unknown22 (40.7%)
User Interaction
None2 (3.7%)
Unknown22 (40.7%)
Required30 (55.6%)
Privileges Required
Low1 (1.9%)
High1 (1.9%)
None30 (55.6%)
Unknown22 (40.7%)

Exploit Exposure

Signals from CVEs in this vendor scope (54 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
1.9% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
13 CVEs
24.1% of CVEs· 78th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Corel.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Corel — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Corel's Products

View all 5 CNAs →

Top CWEs