Read the docs

Ashlar-Vellum

Records105All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high105CVSS 7.0–8.9

Exploited now

Ashlar-Vellum records in CISA KEV

No Ashlar-Vellum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

9 records in Cobalt Share · all components

Priority LOW 38

An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary c…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00165 Published 2026-05-12 No fix listed CWE-125
Priority LOW 38

An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary c…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00165 Published 2026-05-12 No fix listed CWE-125
Priority LOW 38

An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially cr…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00165 Published 2026-05-12 No fix listed CWE-787
Priority LOW 38

An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00354 Published 2025-11-25 No fix listed CWE-787
Priority LOW 38

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing CO files.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00164 Published 2025-08-18 Fixed in 12.6.1204.204 CWE-787
Priority LOW 38

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing AR files.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00164 Published 2025-08-18 Fixed in 12.6.1204.204 CWE-125
Open these records in search →