ZDI-26-873 reports a heap-based buffer overflow in Ashlar-Vellum Cobalt AR file parsing that permits remote code execution with user interaction.
ZDI-26-874 discloses a use-after-free in Ashlar-Vellum Cobalt XE file parsing that enables arbitrary code execution with user interaction.
Ashlar-Vellum Cobalt LI file parsing vulnerability allows remote code execution with user interaction; ZDI assigned CVSS 7.8.
Ashlar-Vellum Cobalt XE file parsing vulnerability allows remote code execution with user interaction; ZDI assigned CVSS 7.8.
ZDI-26-872 discloses a use-after-free in Ashlar-Vellum Cobalt XE file parsing that enables arbitrary code execution with user interaction.
ZDI advisory ZDI-26-587 details a heap-based buffer overflow RCE (CVE-2026-19781, CVSS 7.8) in Ashlar-Vellum Cobalt VS file parsing, requiring user interaction.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 547 readers · 625 views · 206 reads · all time 187K views