8.4
/ 10
HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file is being parsed.
Basic Information
ID
CVE-2025-65088
Source
icscert
Published
May 12, 2026 at 20:27
Modified
May 12, 2026 at 21:12
Affected Product
Vendor
Ashlar-Vellum
Product
Cobalt
Affected Versions
Ashlar-Vellum Cobalt 0
Ashlar-Vellum Xenon 0
Ashlar-Vellum Argon 0
Ashlar-Vellum Lithium 0
Ashlar-Vellum Cobalt Share 0
Ashlar-Vellum Xenon 0
Ashlar-Vellum Argon 0
Ashlar-Vellum Lithium 0
Ashlar-Vellum Cobalt Share 0