Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of VS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28173.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
🚨 HIGH Severity Alert CVE-2026-19781: Ashlar-Vellum Cobalt VS file parsing heap overflow enables RCE (CVSS 7.8). User interaction required. Validate VS files before opening. #CVE #Vulnerability #PatchNow #ThreatIntel #CyberSecurity https://t.co/VLgH4gSUTb
Post summary
The tweet announces CVE-2026-19781, a heap overflow in Ashlar-Vellum Cobalt VS file parsing enabling RCE (CVSS 7.8), and advises validating VS files before opening.