NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2026-121742

CVSS: —
EPSS: —
Published: —
Modified: —

Analyze CVE-2026-121742 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

NVD CVE.org GitHub PoCs EPSS (—)

In the news

1 story

Ashlar-Vellum Cobalt XE file parsing use-after-free enables remote code execution (CVE-2026-121742)

ZDI-26-874 discloses a use-after-free in Ashlar-Vellum Cobalt XE file parsing that enables arbitrary code execution with user interaction.

ZDI Published AdvisoriesNov 4, 06:00 UTC · 6d agoVulnerabilityCVE-2026-1217421

50