Vendors / Ashlar-Vellum Records 105 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 105 CVSS 7.0–8.9
Exploited now Ashlar-Vellum records in CISA KEV No Ashlar-Vellum vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 42
Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00916 · Published 2024-05-03 · No fix listed CWE-787
Priority MEDIUM 42
Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00889 · Published 2024-05-03 · No fix listed CWE-787
Priority MEDIUM 42
Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00897 · Published 2024-05-03 · No fix listed CWE-121
Priority LOW 36
Ashlar-Vellum Graphite VC6 File Parsing Uninitialized Variable Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00234 · Published 2025-09-17 · No fix listed CWE-457
Priority LOW 36
Ashlar-Vellum Graphite VC6 File Parsing Uninitialized Variable Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00234 · Published 2025-09-17 · No fix listed CWE-457
Priority LOW 36
Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00293 · Published 2024-12-30 · No fix listed CWE-122
Priority LOW 36
Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00293 · Published 2024-12-30 · No fix listed CWE-122
Priority LOW 36
In Ashlar-Vellum Graphite v13.0.48, the affected application lacks proper validation of user-supplied data when parsing VC6 files.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00399 · Published 2023-10-26 · No fix listed CWE-125
Priority LOW 35
Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.0021 · Published 2025-09-17 · No fix listed CWE-787
Priority LOW 35
Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.0021 · Published 2025-09-17 · No fix listed CWE-787
Priority LOW 35
Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00205 · Published 2025-09-17 · No fix listed CWE-787
Priority LOW 35
Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00224 · Published 2025-09-17 · No fix listed CWE-122
Priority LOW 35
Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.0022 · Published 2025-09-17 · No fix listed CWE-787
Priority LOW 35
Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00224 · Published 2025-09-17 · No fix listed CWE-121
Priority LOW 35
In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build (1204.77), the affected applications lack proper validation of user-supplied data when parsing XE files.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00227 · Published 2023-10-26 · No fix listed CWE-787
Open these records in search → All records by CVSS severity
Critical0 High105 Medium0 Low0 No CVSS0