CVE-2025-65085: Ashlar Argon

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code.

Affected products

• Ashlar Argon: up to and including 12.2.1204.207
• Ashlar Cobalt: up to and including 12.2.1204.207
• Ashlar Cobalt Share: up to and including 12.2.1204.207
• Ashlar Lithium: up to and including 12.2.1204.207
• Ashlar Xenon: up to and including 12.2.1204.207

Published 2025-11-25. Last modified 2026-06-17.