Approved changes feed: RSS · Atom

cpe:2.3:a:ashlar-vellum:cobalt:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAshlar Vellum (e6645c78-1ea5-5eda-87b8-0ab9cbb4b3dc)
ProductCobalt (d015def4-dc5e-5f12-aa31-b01a0252dc42)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8006 vulnerable 2026-06-08 07:45:18.635656 Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
HIGH (7.8)
Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XE files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26238.
Published: 2025-09-17T20:53:48.401Z
Updated: 2025-09-18T14:04:10.062Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8005 vulnerable 2026-06-08 07:45:18.635413 Ashlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability
HIGH (7.8)
Ashlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XE files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26237.
Published: 2025-09-17T20:53:32.762Z
Updated: 2025-09-18T14:04:27.112Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8004 vulnerable 2026-06-08 07:45:18.634925 Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
HIGH (7.8)
Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XE files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26236.
Published: 2025-09-17T20:53:37.866Z
Updated: 2025-09-18T14:04:21.560Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8003 vulnerable 2026-06-08 07:45:18.634570 Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
HIGH (7.8)
Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CO files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26235.
Published: 2025-09-17T20:53:22.850Z
Updated: 2025-09-18T14:40:16.507Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8002 vulnerable 2026-06-08 07:45:18.634104 Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability
HIGH (7.8)
Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CO files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26233.
Published: 2025-09-17T20:53:42.407Z
Updated: 2025-09-18T14:04:15.808Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8001 vulnerable 2026-06-08 07:45:18.633732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8000 vulnerable 2026-06-08 07:45:18.633170 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7999 vulnerable 2026-06-08 07:45:18.623693 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7998 vulnerable 2026-06-08 07:45:18.623439 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7997 vulnerable 2026-06-08 07:45:18.623071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7996 vulnerable 2026-06-08 07:45:18.622732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7995 vulnerable 2026-06-08 07:45:18.622486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7994 vulnerable 2026-06-08 07:45:18.622071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7993 vulnerable 2026-06-08 07:45:18.621555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7992 vulnerable 2026-06-08 07:45:18.621139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7991 vulnerable 2026-06-08 07:45:18.620890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7990 vulnerable 2026-06-08 07:45:18.620481 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7989 vulnerable 2026-06-08 07:45:18.618245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7985 vulnerable 2026-06-08 07:45:18.615038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7984 vulnerable 2026-06-08 07:45:18.614784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7982 vulnerable 2026-06-08 07:45:18.612120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7977 vulnerable 2026-06-08 07:45:18.606993 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-65088 vulnerable 2026-06-08 07:39:20.696039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-65087 vulnerable 2026-06-08 07:39:20.695132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-65086 vulnerable 2026-06-08 07:39:20.694378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-65085 vulnerable 2026-06-08 07:39:20.693363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-65084 vulnerable 2026-06-08 07:39:20.680572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53705 vulnerable 2026-06-08 07:31:15.018048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52584 vulnerable 2026-06-08 07:31:11.877732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46269 vulnerable 2026-06-08 07:27:07.928070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41392 vulnerable 2026-06-08 07:25:06.930449 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2023 vulnerable 2026-06-08 07:14:57.779836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2022 vulnerable 2026-06-08 07:14:57.779596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2021 vulnerable 2026-06-08 07:14:57.779354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2020 vulnerable 2026-06-08 07:14:57.778961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2019 vulnerable 2026-06-08 07:14:57.778682 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2018 vulnerable 2026-06-08 07:14:57.778223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2017 vulnerable 2026-06-08 07:14:57.777953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2016 vulnerable 2026-06-08 07:14:57.777378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2015 vulnerable 2026-06-08 07:14:57.777012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2014 vulnerable 2026-06-08 07:14:57.776626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2013 vulnerable 2026-06-08 07:14:57.776352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2012 vulnerable 2026-06-08 07:14:57.775146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11465 vulnerable 2026-06-08 07:04:28.186441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11464 vulnerable 2026-06-08 07:04:28.186141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11463 vulnerable 2026-06-08 07:04:28.174451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13049 vulnerable 2026-06-08 06:25:36.589067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13048 vulnerable 2026-06-08 06:25:36.588393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13047 vulnerable 2026-06-08 06:25:36.587779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13046 vulnerable 2026-06-08 06:25:36.587004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13045 vulnerable 2026-06-08 06:25:36.586486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13044 vulnerable 2026-06-08 06:25:36.583721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44437 vulnerable 2026-06-08 06:12:41.016074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42105 vulnerable 2026-06-08 06:11:07.813356 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42104 vulnerable 2026-06-08 06:11:07.811789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42103 vulnerable 2026-06-08 06:11:07.809678 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42102 vulnerable 2026-06-08 06:11:07.809163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42101 vulnerable 2026-06-08 06:11:07.807613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40222 vulnerable 2026-06-08 06:09:41.492665 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39943 vulnerable 2026-06-08 06:09:38.138838 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39427 vulnerable 2026-06-08 06:09:37.375760 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35716 vulnerable 2026-06-08 06:06:27.488511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35715 vulnerable 2026-06-08 06:06:27.486036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35714 vulnerable 2026-06-08 06:06:27.485598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35713 vulnerable 2026-06-08 06:06:27.485249 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35712 vulnerable 2026-06-08 06:06:27.484847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35711 vulnerable 2026-06-08 06:06:27.481492 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35710 vulnerable 2026-06-08 06:06:27.481015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35709 vulnerable 2026-06-08 06:06:27.480469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34311 vulnerable 2026-06-08 06:06:25.034292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34310 vulnerable 2026-06-08 06:06:25.033899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34309 vulnerable 2026-06-08 06:06:25.031790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34305 vulnerable 2026-06-08 06:06:25.025691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34304 vulnerable 2026-06-08 06:06:25.025360 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34303 vulnerable 2026-06-08 06:06:25.024977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34302 vulnerable 2026-06-08 06:06:25.024533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34301 vulnerable 2026-06-08 06:06:25.023789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34300 vulnerable 2026-06-08 06:06:25.022142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34299 vulnerable 2026-06-08 06:06:25.020313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34293 vulnerable 2026-06-08 06:06:25.006244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34292 vulnerable 2026-06-08 06:06:25.005888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34291 vulnerable 2026-06-08 06:06:25.005466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34290 vulnerable 2026-06-08 06:06:25.005131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34289 vulnerable 2026-06-08 06:06:25.004631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34288 vulnerable 2026-06-08 06:06:25.004189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34287 vulnerable 2026-06-08 06:06:25.003703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34286 vulnerable 2026-06-08 06:06:25.003144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.