CVE-2014-8394: Corel Corelcad

Medium severity, CVSS 4.6. EPSS: 7.1% chance of exploitation in the next 30 days.

Multiple untrusted search path vulnerabilities in Corel CAD 2014 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) FxManagedCommands_3.08_9.tx or (2) TD_Mgd_3.08_9.dll file in the current working directory.

Affected products

• Corel Corelcad: version 2014 only

Published 2015-01-15. Last modified 2026-06-17.