Ashlar Security Vulnerabilities (CVEs)
Track 48 security vulnerabilities affecting Ashlar products and software. Get instant email alerts when new CVEs are discovered, automated security monitoring, and patch guidance.
An Out-of-Bounds Write vulnerability in Ashlar-Vellum CAD software allows attackers to execute arbitrary code or disclose sensitive information by sen...
Nov 25, 2025A heap-based buffer overflow vulnerability in Ashlar-Vellum CAD software allows attackers to read sensitive memory or execute arbitrary code by sendin...
Nov 25, 2025This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious XE...
Oct 29, 2025This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious CO...
Oct 29, 2025This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious VC6 files in Ashlar-Vellum Graphite soft...
Sep 17, 2025This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious VC6 files in Ashlar-Vellum Graphite. Att...
Sep 17, 2025This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious LI files or visiting malicious web pages...
Sep 17, 2025A stack-based buffer overflow vulnerability in Ashlar-Vellum Graphite's VC6 file parser allows remote attackers to execute arbitrary code when users o...
Sep 17, 2025A heap-based buffer overflow vulnerability in Ashlar-Vellum CAD software allows attackers to execute arbitrary code by crafting malicious VC6 files. T...
Aug 18, 2025This vulnerability allows attackers to execute arbitrary code by exploiting an out-of-bounds read when parsing AR files in Ashlar-Vellum CAD software....
Aug 18, 2025A buffer overflow vulnerability in Ashlar-Vellum Cobalt's CO file parser allows remote attackers to execute arbitrary code when users open malicious f...
Mar 11, 2025This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious VS...
Mar 11, 2025This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious VC6 files in Ashlar-Vellum Cobalt softwa...
Mar 11, 2025This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious VC6 files in Ashlar-Vellum Cobalt softwa...
Mar 11, 2025This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by exploiting an integer overflow in XE fil...
Mar 11, 2025This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious VS...
Mar 11, 2025This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious LI files in Ashlar-Vellum Cobalt softwar...
Mar 11, 2025This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious VS files in Ashlar-Vellum Cobalt softwar...
Mar 11, 2025This is a use-after-free vulnerability in Ashlar-Vellum Cobalt's CO file parser that allows remote attackers to execute arbitrary code. Attackers can ...
Mar 11, 2025This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious VS...
Mar 11, 2025This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious VS files in Ashlar-Vellum Cobalt softwar...
Mar 11, 2025This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious VC...
Mar 11, 2025This vulnerability in Ashlar-Vellum Cobalt allows attackers to execute arbitrary code by exploiting improper validation when parsing XE files. It affe...
Feb 4, 2025This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious CO files or visiting malicious web pages...
Dec 30, 2024This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious XE...
Dec 30, 2024This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious VC6 files in Ashlar-Vellum Graphite. Att...
Dec 30, 2024A stack-based buffer overflow vulnerability in Ashlar-Vellum Cobalt's AR file parser allows remote attackers to execute arbitrary code when a user ope...
Dec 30, 2024This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious fi...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Xenon installations by tricking users into opening malicious fil...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious AR...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious AR files in Ashlar-Vellum Cobalt. The fl...
May 3, 2024This is a use-after-free vulnerability in Ashlar-Vellum Cobalt's AR file parser that allows remote code execution. Attackers can exploit it by trickin...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious AR files in Ashlar-Vellum Cobalt. Attack...
May 3, 2024A stack-based buffer overflow vulnerability in Ashlar-Vellum Cobalt allows remote attackers to execute arbitrary code when users open malicious CO fil...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious XE...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious IGS files in Ashlar-Vellum Cobalt softwa...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious VC6 files in Ashlar-Vellum Graphite. Att...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious CO...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious CO...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious CO files or visiting malicious web pages...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious VC...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious X_...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious CO files in Ashlar-Vellum Cobalt. Attack...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious X_...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious X_...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Cobalt installations by tricking users into opening malicious CO...
May 3, 2024This is a heap-based buffer overflow vulnerability in Ashlar-Vellum Cobalt's AR file parser that allows remote code execution. Attackers can exploit i...
May 3, 2024Ashlar-Vellum Graphite v13.0.48 has an out-of-bounds read vulnerability when parsing VC6 files due to improper input validation. This allows attackers...
Oct 26, 2023Why Monitor Ashlar Security Vulnerabilities?
Real-time CVE tracking: Our automated system monitors 48+ known vulnerabilities affecting Ashlar products and software packages. Stay ahead of emerging threats with instant email notifications when new security issues are discovered.
Automated security monitoring: Unlike manual CVE checking, FixTheCVE automatically scans your servers and detects vulnerable Ashlar packages in under 60 seconds. No agents required - completely agentless scanning that works across Ashlar deployments.
Free vulnerability database: Access detailed information about every Ashlar CVE including CVSS scores, severity ratings, affected versions, and actionable patch guidance. Filter by critical, high, medium, or low severity to prioritize your security remediation efforts.
🚀 Get Started in 60 Seconds
- Register free account & add your servers
- Run one-time scan or schedule automatic monitoring (every 1-24 hours)
- Receive instant alerts when new Ashlar CVEs affect your systems
- Access dashboard with severity breakdown & fix instructions