CyberSecBulletin

Ashlar-Vellum vulnerabilities

We track 110 vulnerabilities in Ashlar-Vellum products across 6 products. 110 are rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.

110vulnerabilities
2critical
108high
0exploited
7.9average CVSS score

Latest Ashlar-Vellum vulnerabilities

  • 7.8 High severity

    Cobalt: Use After Free

    CVE-2026-121753Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulner

  • 7.8 High severity

    Cobalt: Heap-based Buffer Overflow

    CVE-2026-121752Ashlar-Vellum

    Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit

  • 7.8 High severity

    Cobalt: Stack-based Buffer Overflow

    CVE-2026-121744Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploi

  • 7.8 High severity

    Cobalt: Heap-based Buffer Overflow

    CVE-2026-121743Ashlar-Vellum

    Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit

  • 7.8 High severity

    Cobalt: Use After Free

    CVE-2026-121742Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulner

  • 7.8 High severity

    Cobalt: Heap-based Buffer Overflow

    CVE-2026-19781Ashlar-Vellum

    Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit

  • 7.8 High severity

    Cobalt: Out-of-bounds Read

    CVE-2025-65088Ashlar-Vellum

    An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file is

  • 7.8 High severity

    Cobalt: Out-of-bounds Read

    CVE-2025-65087Ashlar-Vellum

    An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file is

  • 7.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2025-65086Ashlar-Vellum

    An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially crafted VC6 file is being parsed.

  • 9.8 Critical severity

    Cobalt: Heap-based Buffer Overflow

    CVE-2025-65085Ashlar-Vellum

    A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code.

  • 9.8 Critical severity

    Cobalt: Out-of-bounds Write

    CVE-2025-65084Ashlar-Vellum

    An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code.

  • 7.8 High severity

    Cobalt: Use After Free

    CVE-2025-11465Ashlar-Vellum

    Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulner

  • 7.8 High severity

    Cobalt: Heap-based Buffer Overflow

    CVE-2025-11464Ashlar-Vellum

    Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit

  • 7.8 High severity

    Cobalt: Integer Overflow or Wraparound

    CVE-2025-11463Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vuln

  • 7.8 High severity

    Cobalt: Out-of-bounds Read

    CVE-2025-8006Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vu

  • 7.8 High severity

    Cobalt: Access of Resource Using Incompatible Type

    CVE-2025-8005Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulner

  • 7.8 High severity

    Cobalt: Out-of-bounds Read

    CVE-2025-8004Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vu

  • 7.8 High severity

    Cobalt: Out-of-bounds Read

    CVE-2025-8003Ashlar-Vellum

    Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vu

  • 7.8 High severity

    Cobalt: Access of Resource Using Incompatible Type

    CVE-2025-8002Ashlar-Vellum

    Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulner

  • 7.8 High severity

    Cobalt: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2025-8001Ashlar-Vellum

    Ashlar-Vellum Cobalt CO File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vul

  • 7.8 High severity

    Cobalt: Access of Resource Using Incompatible Type

    CVE-2025-8000Ashlar-Vellum

    Ashlar-Vellum Cobalt LI File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulner

  • 7.8 High severity

    Cobalt: Access of Resource Using Incompatible Type

    CVE-2025-7999Ashlar-Vellum

    Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulner

  • 7.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2025-7998Ashlar-Vellum

    Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this v

  • 7.8 High severity

    Cobalt: Out-of-bounds Read

    CVE-2025-7997Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vu

  • 7.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2025-7996Ashlar-Vellum

    Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this v

  • 7.8 High severity

    Cobalt: Access of Resource Using Incompatible Type

    CVE-2025-7995Ashlar-Vellum

    Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulner

  • 7.8 High severity

    Cobalt: Out-of-bounds Read

    CVE-2025-7994Ashlar-Vellum

    Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vu

  • 7.8 High severity

    Cobalt: Use After Free

    CVE-2025-7993Ashlar-Vellum

    Ashlar-Vellum Cobalt LI File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulner

  • 7.8 High severity

    Cobalt: Out-of-bounds Read

    CVE-2025-7992Ashlar-Vellum

    Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vu

  • 7.8 High severity

    Cobalt: Out-of-bounds Read

    CVE-2025-7991Ashlar-Vellum

    Ashlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this v

  • 7.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2025-7990Ashlar-Vellum

    Ashlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this

  • 7.8 High severity

    Cobalt: Out-of-bounds Read

    CVE-2025-7989Ashlar-Vellum

    Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vu

  • 7.8 High severity

    Graphite: Out-of-bounds Write

    CVE-2025-7988Ashlar-Vellum

    Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit t

  • 7.8 High severity

    Graphite: Out-of-bounds Write

    CVE-2025-7987Ashlar-Vellum

    Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit t

  • 7.8 High severity

    Graphite: Out-of-bounds Write

    CVE-2025-7986Ashlar-Vellum

    Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit t

  • 7.8 High severity

    Cobalt: Integer Overflow or Wraparound

    CVE-2025-7985Ashlar-Vellum

    Ashlar-Vellum Cobalt VC6 File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vul

  • 7.8 High severity

    Cobalt: Use of Uninitialized Variable

    CVE-2025-7984Ashlar-Vellum

    Ashlar-Vellum Cobalt AR File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit thi

  • 7.8 High severity

    Graphite: Heap-based Buffer Overflow

    CVE-2025-7983Ashlar-Vellum

    Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to ex

  • 7.8 High severity

    Cobalt: Integer Overflow or Wraparound

    CVE-2025-7982Ashlar-Vellum

    Ashlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vuln

  • 7.8 High severity

    Graphite: Use of Uninitialized Variable

    CVE-2025-7981Ashlar-Vellum

    Ashlar-Vellum Graphite VC6 File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploi