CVE-2021-38110

Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious DOC file.

• CWE-787

• https://www.fortiguard.com/zeroday/FG-VD-21-036Third Party Advisory
• https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-productsThird Party Advisory
• https://www.fortiguard.com/zeroday/FG-VD-21-036Third Party Advisory
• https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-productsThird Party Advisory

Published

Oct 1, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-38105IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affecte…5.5
• CVE-2021-38106UAX200.dll in Corel Presentations 2020 20.0.0.200 is affecte…5.5
• CVE-2021-38107CdrCore.dll in Corel DrawStandard 2020 22.0.0.474 is affecte…5.5
• CVE-2021-38108Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is …5.5
• CVE-2021-38109Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-…5.5
• CVE-2021-3811adminlte is vulnerable to Improper Neutralization of Input D…6.1
• CVE-2021-38111The DEF CON 27 badge allows remote attackers to exploit a bu…8.8
• CVE-2021-38112In the Amazon AWS WorkSpaces client 3.0.10 through 3.1.8 on …8.8
• CVE-2021-38113In addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-Op…5.4
• CVE-2021-38114libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the retur…5.5
• CVE-2021-38115read_header_tga in gd_tga.c in the GD Graphics Library (aka …6.5
• CVE-2021-38116Possible Elevation of Privilege Vulnerability in iManager h…8.8