<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: corel</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-43618: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelD</title><link>https://patchthecve.com/cve/CVE-2022-43618.html</link><guid>https://patchthecve.com/cve/CVE-2022-43618.html</guid><pubDate>Wed, 17 Jun 2026 05:06:57 +0000</pubDate><description>HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists wi</description></item><item><title>CVE-2022-43617: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelD</title><link>https://patchthecve.com/cve/CVE-2022-43617.html</link><guid>https://patchthecve.com/cve/CVE-2022-43617.html</guid><pubDate>Wed, 17 Jun 2026 05:06:57 +0000</pubDate><description>HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists wi</description></item><item><title>CVE-2022-43616: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelD</title><link>https://patchthecve.com/cve/CVE-2022-43616.html</link><guid>https://patchthecve.com/cve/CVE-2022-43616.html</guid><pubDate>Wed, 17 Jun 2026 05:06:57 +0000</pubDate><description>HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists wi</description></item><item><title>CVE-2022-43615: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Core</title><link>https://patchthecve.com/cve/CVE-2022-43615.html</link><guid>https://patchthecve.com/cve/CVE-2022-43615.html</guid><pubDate>Wed, 17 Jun 2026 05:06:57 +0000</pubDate><description>MEDIUM 5.5: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw e</description></item><item><title>CVE-2022-43614: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelD</title><link>https://patchthecve.com/cve/CVE-2022-43614.html</link><guid>https://patchthecve.com/cve/CVE-2022-43614.html</guid><pubDate>Wed, 17 Jun 2026 05:06:57 +0000</pubDate><description>HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists wi</description></item><item><title>CVE-2022-43613: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelD</title><link>https://patchthecve.com/cve/CVE-2022-43613.html</link><guid>https://patchthecve.com/cve/CVE-2022-43613.html</guid><pubDate>Wed, 17 Jun 2026 05:06:57 +0000</pubDate><description>HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists wi</description></item><item><title>CVE-2022-43612: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Core</title><link>https://patchthecve.com/cve/CVE-2022-43612.html</link><guid>https://patchthecve.com/cve/CVE-2022-43612.html</guid><pubDate>Wed, 17 Jun 2026 05:06:56 +0000</pubDate><description>MEDIUM 5.5: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw e</description></item><item><title>CVE-2022-43611: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Core</title><link>https://patchthecve.com/cve/CVE-2022-43611.html</link><guid>https://patchthecve.com/cve/CVE-2022-43611.html</guid><pubDate>Wed, 17 Jun 2026 05:06:56 +0000</pubDate><description>MEDIUM 5.5: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw e</description></item><item><title>CVE-2022-43610: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Core</title><link>https://patchthecve.com/cve/CVE-2022-43610.html</link><guid>https://patchthecve.com/cve/CVE-2022-43610.html</guid><pubDate>Wed, 17 Jun 2026 05:06:56 +0000</pubDate><description>MEDIUM 5.5: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw e</description></item><item><title>CVE-2022-46662: Roxio Creator LJB starts another program with an unquoted file path</title><link>https://patchthecve.com/cve/CVE-2022-46662.html</link><guid>https://patchthecve.com/cve/CVE-2022-46662.html</guid><pubDate>Wed, 17 Jun 2026 05:12:09 +0000</pubDate><description>MEDIUM 6.7: Roxio Creator LJB starts another program with an unquoted file path. Since a registered Windows service path contains spaces and are unquoted, if a malicious executable is placed on a certain path, the executable may be executed with the privilege of the Windows service. The affected product and ver</description></item></channel></rss>