Read the docs

Ashlar-Vellum

Records105All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high105CVSS 7.0–8.9

Exploited now

Ashlar-Vellum records in CISA KEV

No Ashlar-Vellum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

87 records in Cobalt · all components

TI-2023-17127 CVE-2023-34293 · GHSA-pj4p-9vfq-cv6c

Out-of-bounds write in Ashlar-Vellum Cobalt

Priority MEDIUM 41

Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00763 Published 2024-05-03 No fix listed CWE-787
Priority LOW 38

An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary c…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00165 Published 2026-05-12 No fix listed CWE-125
Priority LOW 38

An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary c…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00165 Published 2026-05-12 No fix listed CWE-125
Priority LOW 38

An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially cr…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00165 Published 2026-05-12 No fix listed CWE-787
Priority LOW 38

An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00354 Published 2025-11-25 No fix listed CWE-787
Priority LOW 38

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing CO files.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00164 Published 2025-08-18 Fixed in 12.6.1204.204 CWE-787
Priority LOW 38

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing AR files.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00164 Published 2025-08-18 Fixed in 12.6.1204.204 CWE-125
Priority LOW 38

In Ashlar-Vellum Cobalt versions prior to v12 SP2 Build (1204.200), the affected application lacks proper validation of user-supplied data when parsing CO files.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00205 Published 2025-02-04 Fixed in v12 SP2 Build (1204.200) CWE-122
Priority LOW 38

In Ashlar-Vellum Cobalt versions prior to v12 SP2 Build (1204.200), the affected application lacks proper validation of user-supplied data when parsing XE files.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00202 Published 2025-02-04 Fixed in v12 SP2 Build (1204.200) CWE-787
TI-2023-22472 CVE-2023-42104 · GHSA-h7vg-wchh-wv3q

Use after free in Ashlar-Vellum Cobalt

Priority LOW 37

Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00638 Published 2024-05-03 No fix listed CWE-416
TI-2023-22471 CVE-2023-42103 · GHSA-v25f-55p2-5p97

Use after free in Ashlar-Vellum Cobalt

Priority LOW 37

Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00638 Published 2024-05-03 No fix listed CWE-416
TI-2023-22470 CVE-2023-42102 · GHSA-j3pm-qhwh-63j2

Type confusion in Ashlar-Vellum Cobalt

Priority LOW 37

Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00572 Published 2024-05-03 No fix listed CWE-843
TI-2023-22469 CVE-2023-42101 · GHSA-x83v-8jx9-3xvp

Out-of-bounds read in Ashlar-Vellum Cobalt

Priority LOW 37

Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00572 Published 2024-05-03 No fix listed CWE-125
TI-2025-01761 CVE-2025-2023 · GHSA-78p3-88v5-4j32

Integer overflow in Ashlar-Vellum Cobalt

Priority LOW 36

Ashlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00268 Published 2025-03-11 No fix listed CWE-190
TI-2025-01760 CVE-2025-2022 · GHSA-grfv-8m4f-679x

Type confusion in Ashlar-Vellum Cobalt

Priority LOW 36

Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00268 Published 2025-03-11 No fix listed CWE-843
TI-2025-01759 CVE-2025-2021 · GHSA-vhwr-gfg8-hm5j

Integer overflow in Ashlar-Vellum Cobalt

Priority LOW 36

Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00268 Published 2025-03-11 No fix listed CWE-190
Priority LOW 36

Ashlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00268 Published 2025-03-11 No fix listed CWE-787
Priority LOW 36

Ashlar-Vellum Cobalt VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00272 Published 2025-03-11 No fix listed CWE-122
TI-2025-01756 CVE-2025-2018 · GHSA-88hj-hc74-5p58

Type confusion in Ashlar-Vellum Cobalt

Priority LOW 36

Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00268 Published 2025-03-11 No fix listed CWE-843
TI-2025-01755 CVE-2025-2017 · GHSA-w6jf-6fg2-jpjx

Buffer overflow in Ashlar-Vellum Cobalt

Priority LOW 36

Ashlar-Vellum Cobalt CO File Parsing Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00272 Published 2025-03-11 No fix listed CWE-120
TI-2025-01754 CVE-2025-2016 · GHSA-qv26-j3vv-r7p7

Type confusion in Ashlar-Vellum Cobalt

Priority LOW 36

Ashlar-Vellum Cobalt VC6 File Parsing Type Confusion Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00268 Published 2025-03-11 No fix listed CWE-843
TI-2025-01753 CVE-2025-2015 · GHSA-8h6g-xc7x-fxv4

Type confusion in Ashlar-Vellum Cobalt

Priority LOW 36

Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00268 Published 2025-03-11 No fix listed CWE-843
Load more
Open these records in search →