AC
Product
Armoury Crate
25
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 11Medium 12Low 1
Watch
Add Armoury Crate to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-9337 | 6.8 | Oct 13 | A null pointer dereference has been identified in the AsIO3.sys driver Affected: Before v6.3.4 |
| CVE-2025-9336 | 6.8 | Oct 13 | A stack buffer overflow has been identified in the AsIO3.sys driver Affected: Before v6.3.4 |
| CVE-2026-16004 | 5.9 | Sep 8 | Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by… Affected: through 6.5.7 |
| CVE-2026-75809 | 5.9 | Sep 8 | Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver… Affected: through 6.5.7 |
| CVE-2026-16005 | 5.8 | Sep 8 | Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the driver's verification,… Affected: through 6.5.7 |
| CVE-2026-75811 | 5.8 | Sep 8 | Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and potentially cause hardware… Affected: through 6.5.7 |
| CVE-2026-18023 | 5.7 | Sep 8 | Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uninitialized memory via a… Affected: through 6.5.7 |
| CVE-2026-16006 | 5.7 | Sep 8 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL… Affected: through 6.5.7 |
| CVE-2026-75808 | 5.7 | Sep 8 | Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-service condition through system memory exhaustion by bypassing… Affected: through 6.5.7 |
| CVE-2026-75810 | 5.7 | Sep 8 | Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger… Affected: through 6.5.7 |
| CVE-2026-12962 | 5.3 | Sep 8 | A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted… Affected: through 6.5.7.0 |
| CVE-2025-11775 | 4.8 | Dec 17 | An out-of-bounds read vulnerability has been identified in the asComSvc service Affected: v6.3.4 and earlier |
Showing 12