CVE-2025-65087: Ashlar Argon

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file is being parsed.

Affected products

• Ashlar Argon: up to and including 12.6.1204.216
• Ashlar Cobalt: up to and including 12.6.1204.216
• Ashlar Cobalt Share: up to and including 12.6.1204.216
• Ashlar Lithium: up to and including 12.6.1204.216
• Ashlar Xenon: up to and including 12.6.1204.216

Published 2026-05-12. Last modified 2026-06-17.