Read the docs

Ashlar-Vellum

Records105All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high105CVSS 7.0–8.9

Exploited now

Ashlar-Vellum records in CISA KEV

No Ashlar-Vellum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

15 records in Graphite · all components

Priority MEDIUM 42

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00916 Published 2024-05-03 No fix listed CWE-787
Priority MEDIUM 42

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00889 Published 2024-05-03 No fix listed CWE-787
Priority MEDIUM 42

Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00897 Published 2024-05-03 No fix listed CWE-121
Priority LOW 36

Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00293 Published 2024-12-30 No fix listed CWE-122
Priority LOW 36

Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00293 Published 2024-12-30 No fix listed CWE-122
TI-2023-20832 CVE-2023-39936 · GHSA-3f6x-6xxh-4m9v

Ashlar-Vellum Graphite Out-of-bounds Read

Priority LOW 36

In Ashlar-Vellum Graphite v13.0.48, the affected application lacks proper validation of user-supplied data when parsing VC6 files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00399 Published 2023-10-26 No fix listed CWE-125
Priority LOW 35

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0021 Published 2025-09-17 No fix listed CWE-787
Priority LOW 35

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0021 Published 2025-09-17 No fix listed CWE-787
Priority LOW 35

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00205 Published 2025-09-17 No fix listed CWE-787
Priority LOW 35

Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00224 Published 2025-09-17 No fix listed CWE-122
Priority LOW 35

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0022 Published 2025-09-17 No fix listed CWE-787
Priority LOW 35

Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00224 Published 2025-09-17 No fix listed CWE-121
Priority LOW 35

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build (1204.77), the affected applications lack proper validation of user-supplied data when parsing XE files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-10-26 No fix listed CWE-787
Open these records in search →