This vulnerability (CWE-122) involves a heap-based buffer overflow in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and earlier. Exploitation could lead to information disclosure or arbitrary code execution. The CVSS 4.0 vector indicates local attack vector with low attack complexity, no privileges required, but user interaction is needed. The vulnerability impacts confidentiality, integrity, and availability with high severity. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation could allow an attacker to disclose sensitive information or execute arbitrary code on affected systems, potentially compromising confidentiality, integrity, and availability. The attack requires local access and user interaction but no privileges, making it a significant risk in environments where users can be tricked into interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to trusted users and exercise caution with user interactions involving the affected products. Monitor vendor channels for updates on patches or mitigations.