Priority LOW 38
An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary c…
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00165 · Published 2026-05-12 · No fix listed CWE-125
Priority LOW 38
An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary c…
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00165 · Published 2026-05-12 · No fix listed CWE-125
Priority LOW 38
An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially cr…
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00165 · Published 2026-05-12 · No fix listed CWE-787
Priority LOW 39
A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbi…
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00445 · Published 2025-11-25 · No fix listed CWE-122
Priority LOW 38
An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary…
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00354 · Published 2025-11-25 · No fix listed CWE-787
Priority LOW 38
In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing VC6 files.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00183 · Published 2025-08-18 · Fixed in 12.6.1204.204 CWE-122
Priority LOW 38
In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing XE files.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00183 · Published 2025-08-18 · Fixed in 12.6.1204.204 CWE-122
Priority LOW 38
In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing AR files.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.0018 · Published 2025-08-18 · Fixed in 12.6.1204.204 CWE-125
Priority LOW 38
In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing CO files.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.0018 · Published 2025-08-18 · Fixed in 12.6.1204.204 CWE-787
Priority MEDIUM 42
Ashlar-Vellum Lithium Uncontrolled Search Path Element Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00825 · Published 2024-05-03 · No fix listed CWE-427
Priority LOW 35
In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build (1204.77), the affected applications lack proper validation of user-supplied data when parsing XE files.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00227 · Published 2023-10-26 · No fix listed CWE-787