CVE-2023-35712

Ashlar-Vellum Cobalt XE is affected by a remote code execution vulnerability in the XE file parser caused by uninitialized memory access. The issue allows an attacker, with user interaction (visiting a malicious page or opening a malicious XE file), to execute code in the context of the victim pr...