CVE-2014-8395: Corel Painter

Medium severity, CVSS 4.6. EPSS: 7.1% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Corel Painter 2015 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wacommt.dll file that is located in the same folder as the file being processed.

Affected products

• Corel Painter: version 2015 only

Published 2015-01-15. Last modified 2026-06-17.