CyberSecBulletin

Ashlar-Vellum vulnerabilities

We track 110 vulnerabilities in Ashlar-Vellum products across 6 products. 110 are rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.

110vulnerabilities
2critical
108high
0exploited
7.9average CVSS score

Latest Ashlar-Vellum vulnerabilities

  • 7.8 High severity

    Cobalt: Access of Uninitialized Pointer

    CVE-2023-35715Ashlar-Vellum

    Ashlar-Vellum Cobalt AR File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this

  • 7.8 High severity

    Cobalt: Out-of-bounds Read

    CVE-2023-35714Ashlar-Vellum

    Ashlar-Vellum Cobalt IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this v

  • 7.8 High severity

    Cobalt: Access of Uninitialized Pointer

    CVE-2023-35713Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this

  • 7.8 High severity

    Cobalt: Access of Uninitialized Pointer

    CVE-2023-35712Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this

  • 7.8 High severity

    Cobalt: Untrusted Pointer Dereference

    CVE-2023-35711Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to expl

  • 7.8 High severity

    Cobalt: Stack-based Buffer Overflow

    CVE-2023-35710Ashlar-Vellum

    Ashlar-Vellum Cobalt Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerabi

  • 7.8 High severity

    Cobalt: Heap-based Buffer Overflow

    CVE-2023-35709Ashlar-Vellum

    Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerabil

  • 7.8 High severity

    Cobalt: Untrusted Pointer Dereference

    CVE-2023-34311Ashlar-Vellum

    Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnera

  • 7.8 High severity

    Cobalt: Use of Uninitialized Variable

    CVE-2023-34310Ashlar-Vellum

    Ashlar-Vellum Cobalt Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in

  • 7.8 High severity

    Cobalt: Untrusted Pointer Dereference

    CVE-2023-34309Ashlar-Vellum

    Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnera

  • 8.8 High severity

    Graphite: Out-of-bounds Write

    CVE-2023-34308Ashlar-Vellum

    Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit t

  • 8.8 High severity

    Graphite: Out-of-bounds Write

    CVE-2023-34307Ashlar-Vellum

    Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit t

  • 8.8 High severity

    Graphite: Out-of-bounds Write

    CVE-2023-34306Ashlar-Vellum

    Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to e

  • 7.0 High severity

    Cobalt: Out-of-bounds Write

    CVE-2023-34305Ashlar-Vellum

    Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in

  • 7.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2023-34304Ashlar-Vellum

    Ashlar-Vellum Cobalt Out-Of-Bounds Access Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in

  • 7.8 High severity

    Cobalt: Out-of-bounds Read

    CVE-2023-34303Ashlar-Vellum

    Ashlar-Vellum Cobalt Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in t

  • 7.8 High severity

    Cobalt: Stack-based Buffer Overflow

    CVE-2023-34302Ashlar-Vellum

    Ashlar-Vellum Cobalt CO File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploi

  • 7.8 High severity

    Cobalt: Untrusted Pointer Dereference

    CVE-2023-34301Ashlar-Vellum

    Ashlar-Vellum Cobalt CO File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to expl

  • 7.8 High severity

    Cobalt: Untrusted Pointer Dereference

    CVE-2023-34300Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to expl

  • 7.8 High severity

    Cobalt: Heap-based Buffer Overflow

    CVE-2023-34299Ashlar-Vellum

    Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit

  • 8.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2023-34293Ashlar-Vellum

    Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in

  • 7.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2023-34292Ashlar-Vellum

    Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in

  • 7.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2023-34291Ashlar-Vellum

    Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in

  • 7.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2023-34290Ashlar-Vellum

    Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in

  • 7.8 High severity

    Cobalt: Heap-based Buffer Overflow

    CVE-2023-34289Ashlar-Vellum

    Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerabil

  • 7.8 High severity

    Cobalt: Access of Uninitialized Pointer

    CVE-2023-34288Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Uninitialized Pointer Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this

  • 7.8 High severity

    Cobalt: Stack-based Buffer Overflow

    CVE-2023-34287Ashlar-Vellum

    Ashlar-Vellum Cobalt CO File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploi

  • 7.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2023-34286Ashlar-Vellum

    Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this v

  • 7.8 High severity

    Graphite: Out-of-bounds Read

    CVE-2023-39936Ashlar-Vellum

    In Ashlar-Vellum Graphite v13.0.48, the affected application lacks proper validation of user-supplied data when parsing VC6 files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute arbitrary code in the context

  • 7.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2023-39427Ashlar-Vellum

    In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build (1204.77), the affected applications lack proper validation of user-supplied data when parsing XE files. This could lead to an out-of-bounds write. An attacker could leverage this v