← Back to feed
advisories Zero Day Initiative

ZDI-26-587: Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Zero Day Initiative

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to explo...

T1190 1 IOC
Read the full story Zero Day Initiative →

Related Coverage

advisories CISA Adds One Known Exploited Vulnerability to Catalog CISA Advisories · Aug 24 advisories DOUBLECUP's PNG Payload, (Mon, Aug 24th) SANS ISC · Aug 24 advisories ZDI-26-588: Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability Zero Day Initiative · Aug 24