Vulnerabilidades em Ashlar-Vellum

104 resultados
Análise Vexday

Com 104 CVEs catalogadas e nenhuma registrada no catálogo de explorações ativas da CISA (KEV), a taxa de exploração confirmada de Ashlar-Vellum está abaixo da média geral do catálogo, o que indica ausência de ameaça ativa documentada no momento. O tipo de falha mais recorrente é CWE-787 (escrita fora dos limites de memória), categoria frequentemente associada a corrupção de memória e potencial execução de código arbitrário, exigindo atenção estrutural no ciclo de desenvolvimento. A CVE mais perigosa atualmente apontada é CVE-2023-34308, com pontuação EPSS de 0,0092, sugerindo probabilidade baixa de exploração em curto prazo, embora o surgimento de 3 novas CVEs nos últimos 90 dias indique atividade contínua de pesquisa e descoberta de vulnerabilidades nessa plataforma. Equipes de segurança devem acompanhar esse fluxo recente e priorizar a aplicação de correções, especialmente em ambientes onde os produtos Ashlar-Vellum processam arquivos de fontes não confiáveis.

CVE-2023-34308HIGHAshlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-34306HIGHAshlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-34307HIGHAshlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-44440HIGHAshlar-Vellum Lithium Uncontrolled Search Path Element Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-44439HIGHAshlar-Vellum Xenon Uncontrolled Search Path Element Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-44438HIGHAshlar-Vellum Argon Uncontrolled Search Path Element Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-34293HIGHAshlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-42103HIGHAshlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-42104HIGHAshlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-42101HIGHAshlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-42102HIGHAshlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-35715HIGHAshlar-Vellum Cobalt AR File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-35713HIGHAshlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-34310HIGHAshlar-Vellum Cobalt Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2025-65085HIGHHeap-based Buffer Overflow in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt ShareEPSS 0.4%CVE-2023-35712HIGHAshlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-34292HIGHAshlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-34301HIGHAshlar-Vellum Cobalt CO File Parsing Untrusted Pointer Dereference Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-35714HIGHAshlar-Vellum Cobalt IGS File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-34286HIGHAshlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%