Cobalt

Vendor:

First CVE: Oct 26, 2023 · Active for 2 years

87

Total CVEs

More Total CVEs than 99% of tracked products

21.8

Avg CVEs / Year

Higher CVE frequency than 98% of tracked products

7.8

Avg CVSS

Higher Avg CVSS than 67% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Cobalt over time

Volume of CVEsAvg CVSS Base Score

First CVE

Oct 26, 2023

2 years ago

Most Recent CVE

May 12, 2026

75 days ago

CVE Severity & Scoring

Cobalt87 CVEs

98%

All CVEs352,719 CVEs

45%

40%

11%

HighCritical

Attack Vector

Local84 (96.6%)

Network3 (3.4%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low86 (98.9%)

High1 (1.1%)

Unknown0 (0.0%)

User Interaction

None2 (2.3%)

Unknown0 (0.0%)

Required85 (97.7%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None87 (100.0%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (87 CVEs).

87 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2025-2023HIGH Ashlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installa	Mar 11, 2025	7.8	31	NO	NO
CVE-2025-2021HIGH Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installa	Mar 11, 2025	7.8	31	NO	NO
CVE-2025-65085CRITICAL A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker	Nov 25, 2025	9.8	30	NO	NO
CVE-2025-65088HIGH An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to dis	May 12, 2026	7.8	28	NO	NO
CVE-2025-65087HIGH An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to dis	May 12, 2026	7.8	28	NO	NO
CVE-2025-65086HIGH An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to ex	May 12, 2026	7.8	28	NO	NO
CVE-2025-65084CRITICAL An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to di	Nov 25, 2025	9.8	27	NO	NO
CVE-2025-8000HIGH Ashlar-Vellum Cobalt LI File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installati	Sep 17, 2025	7.8	27	NO	NO
CVE-2025-2022HIGH Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installati	Mar 11, 2025	7.8	27	NO	NO
CVE-2025-2020HIGH Ashlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst	Mar 11, 2025	7.8	27	NO	NO

View all 87 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (87 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (87 CVEs).

Media Mentions

Signals from CVEs in this product scope (87 CVEs).

Top CNAs Publishing CVEs For Cobalt

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
12.2.1204.97	3	7.8	0.2%
12.2.1204.96	3	7.8	0.2%
12.0.1204.91	14	7.8	0.3%
12.0.1204.90	6	7.8	0.3%
12.0.1204.62	1	7.8	0.5%
12.0.1204.61	4	7.8	0.5%
12.0.1204.60	2	7.8	0.4%
12.0.1204.59	3	7.8	0.4%
12.0.1204.57	5	7.8	0.4%
12.0.1204.49	1	7.0	0.3%
11.0.1111	4	7.8	0.4%