Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Priority LOW 38

An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary c…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00165 Published 2026-05-12 No fix listed CWE-125
Priority LOW 38

An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary c…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00165 Published 2026-05-12 No fix listed CWE-125
Priority LOW 38

An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially cr…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00165 Published 2026-05-12 No fix listed CWE-787
Priority LOW 38

An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00354 Published 2025-11-25 No fix listed CWE-787
Priority LOW 38

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing AR files.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.0018 Published 2025-08-18 Fixed in 12.6.1204.204 CWE-125
Priority LOW 38

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing CO files.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.0018 Published 2025-08-18 Fixed in 12.6.1204.204 CWE-787