Vulnerabilidades em Ashlar-Vellum

105 resultados
Análise Vexday

Com 104 CVEs catalogadas e nenhuma registrada no catálogo de explorações ativas da CISA (KEV), a taxa de exploração confirmada de Ashlar-Vellum está abaixo da média geral do catálogo, o que indica ausência de ameaça ativa documentada no momento. O tipo de falha mais recorrente é CWE-787 (escrita fora dos limites de memória), categoria frequentemente associada a corrupção de memória e potencial execução de código arbitrário, exigindo atenção estrutural no ciclo de desenvolvimento. A CVE mais perigosa atualmente apontada é CVE-2023-34308, com pontuação EPSS de 0,0092, sugerindo probabilidade baixa de exploração em curto prazo, embora o surgimento de 3 novas CVEs nos últimos 90 dias indique atividade contínua de pesquisa e descoberta de vulnerabilidades nessa plataforma. Equipes de segurança devem acompanhar esse fluxo recente e priorizar a aplicação de correções, especialmente em ambientes onde os produtos Ashlar-Vellum processam arquivos de fontes não confiáveis.

CVE-2025-7981HIGHAshlar-Vellum Graphite VC6 File Parsing Uninitialized Variable Remote Code Execution VulnerabilityEPSS 0.2%CVE-2024-13044HIGHAshlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2024-13049HIGHAshlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7983HIGHAshlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7979HIGHAshlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7980HIGHAshlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7977HIGHAshlar-Vellum Cobalt LI File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7982HIGHAshlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7993HIGHAshlar-Vellum Cobalt LI File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7984HIGHAshlar-Vellum Cobalt AR File Parsing Uninitialized Variable Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7996HIGHAshlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7990HIGHAshlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7992HIGHAshlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7988HIGHAshlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7987HIGHAshlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7999HIGHAshlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-8003HIGHAshlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7997HIGHAshlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7998HIGHAshlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-8005HIGHAshlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution VulnerabilityEPSS 0.2%