High severity · published Aug 11, 2026
CVE-2026-8917
Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary…
8.4
CVSS
0.2%
EPSS
No
On KEV
Description
Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation.
Refer to the '
Security Update for ASUS GPU Tweak III, GPU Tweak II, AI Suite 3, and Armoury Crate Security Bulletin ' section on the ASUS Security Advisory for more information.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
AI Suite3 · ASUS
through V2.1.2.0 · source: vendor
GT
GPU Tweak III · ASUS
through V2.1.1.7 · source: vendor
GP
GPUTweakII · ASUS
through V2.4.0.0 · source: vendor
VG
VGAdll · ASUS
through V0.0.7.8 · source: vendor
