AC
Product
Armoury Crate
17
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 6Medium 9Low 1
Watch
Add Armoury Crate to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5716 | 9.8 | Jan 19 | ASUS Armoury Crate has a vulnerability in arbitrary file write and allows remote attackers to access or modify arbitrary files by sending specific HTTP requests without permission Affected: before 4.1.0.8 |
| CVE-2026-102438 | 8.5 | Oct 20 | An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link… Affected: V3.0.0. through V6.5.10 |
| CVE-2023-26911 | 7.8 | Jul 26 | ASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path vulnerability which allows local users to launch processes with elevated… Affected: through 5.3.4.0 |
| CVE-2022-42455 | 7.8 | Feb 15 | ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and shipped with multiple ASUS software products, contains… Affected: before 5.3.4.1 |
| CVE-2026-16727 | 7.3 | Jul 30 | Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated… Affected: V5.4.1 through V6.4.12 |
| CVE-2026-8070 | 7.3 | May 29 | Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s validation mechanism, resulting in unauthorized read and write… Affected: through 6.4.12 |
| CVE-2026-8918 | 7.1 | Jun 22 | A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or cause a system crash (BSOD) by… Affected: through 6.4.12 |
| CVE-2026-16004 | 5.9 | Sep 8 | Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by… Affected: through 6.5.7 |
| CVE-2026-75809 | 5.9 | Sep 8 | Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver… Affected: through 6.5.7 |
| CVE-2026-16005 | 5.8 | Sep 8 | Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the driver's verification,… Affected: through 6.5.7 |
| CVE-2026-75811 | 5.8 | Sep 8 | Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and potentially cause hardware… Affected: through 6.5.7 |
| CVE-2026-18023 | 5.7 | Sep 8 | Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uninitialized memory via a… Affected: through 6.5.7 |
| CVE-2026-16006 | 5.7 | Sep 8 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL… Affected: through 6.5.7 |
| CVE-2026-75808 | 5.7 | Sep 8 | Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-service condition through system memory exhaustion by bypassing… Affected: through 6.5.7 |
| CVE-2026-75810 | 5.7 | Sep 8 | Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger… Affected: through 6.5.7 |
| CVE-2026-12962 | 5.3 | Sep 8 | A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted… Affected: through 6.5.7.0 |
| CVE-2026-16003 | 2.0 | Sep 8 | Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL… Affected: through 6.5.7 |
Showing 17