Asus vulnerabilities | LiveThreat CVE Feed

CVE	Product	CVSS	EPSS	Published	Summary
CVE-2026-88781 New	MF motherboards firmware ASUS	6.8	0%	Oct 27	Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to…
CVE-2026-75775 New	RO Router ASUS	7.7	1%	Oct 23	Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted…
CVE-2026-93489 New	RO Router ASUS	8.7	0%	Oct 23	Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform…
CVE-2026-75779 New	RO Router ASUS	8.6	1%	Oct 23	Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow an attacker to trick…
CVE-2026-75753	RO Router ASUS	5.3	0%	Oct 20	Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP requests, causing the router to…
CVE-2026-17518	RO Router ASUS	8.2	0%	Oct 20	Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an…
CVE-2026-102438	AC Armoury Crate ASUS	8.5	0%	Oct 20	An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link…
CVE-2026-14911	RO Router ASUS	9.3	0%	Oct 7	Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a remote attacker to read DOM information, modify router…
CVE-2026-19396	RO Router ASUS	7.7	0%	Oct 7	A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user…
CVE-2026-19386	RO Router ASUS	9.3	0%	Oct 7	A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the…
CVE-2026-16528	RO Router ASUS	8.4	0%	Oct 7	Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS credentials from the system log, potentially…
CVE-2026-13313	RO Router ASUS	8.9	1%	Oct 1	An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms and enable the…
CVE-2026-14157	RO Router ASUS	9.4	1%	Oct 1	Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the…
CVE-2026-93495	MM Motherboard(ROG MAXIMUS XI HERO ) ASUS	7.0	0%	Oct 1	Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device
CVE-2026-19397	CC Control Center Express Agent ASUS	7.7	0%	Sep 8	Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent…
CVE-2026-12962	AC Armoury Crate ASUS	5.3	0%	Sep 8	A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted…
CVE-2026-18023	AC Armoury Crate ASUS	5.7	0%	Sep 8	Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uninitialized memory via a…
CVE-2026-16003	AC Armoury Crate ASUS	2.0	0%	Sep 8	Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL…
CVE-2026-16004	AC Armoury Crate ASUS	5.9	0%	Sep 8	Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by…
CVE-2026-16005	AC Armoury Crate ASUS	5.8	0%	Sep 8	Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the driver's verification,…
CVE-2026-16006	AC Armoury Crate ASUS	5.7	0%	Sep 8	Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL…
CVE-2026-75808	AC Armoury Crate ASUS	5.7	0%	Sep 8	Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-service condition through system memory exhaustion by bypassing…
CVE-2026-75809	AC Armoury Crate ASUS	5.9	0%	Sep 8	Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver…
CVE-2026-75810	AC Armoury Crate ASUS	5.7	0%	Sep 8	Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger…
CVE-2026-75811	AC Armoury Crate ASUS	5.8	0%	Sep 8	Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and potentially cause hardware…
CVE-2026-75754	CC Control Center Enterprise (ACC) ASUS	10.0	0%	Sep 4	Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard-coded Credentials in ASUS Control Center allow an unauthorized user to obtain the…
CVE-2026-19398	FA FA507NV ASUS	6.8	0%	Aug 27	An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash (BSOD) or BIOS corruption via a crafted…
CVE-2026-8917	GT GPU Tweak III ASUS	8.4	0%	Aug 11	Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary…
CVE-2026-16727	AC Armoury Crate ASUS	7.3	0%	Jul 30	Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated…
CVE-2019-25764	AS AURA SYNC ASUS	7.3	0%	Jul 17	UNSUPPORTED WHEN ASSIGNED Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke…
CVE-2026-13385	RO Router ASUS	9.5	0%	Jul 15	An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middle(MITM) user to make the router…
CVE-2026-15029	SC System Control Interface v3 ASUS	8.4	0%	Jul 15	Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary…
CVE-2026-15030	SC System Control Interface v3 ASUS	5.6	0%	Jul 15	Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the…
CVE-2026-13585	SC System Control Interface v3 ASUS	8.2	0%	Jul 15	Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business…
CVE-2026-8920	AW Aura Wallpaper Service ASUS	8.5	0%	Jul 15	Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Name or Path in Aura Wallpaper Service allow a local user to perform file…
CVE-2026-8919	GA GameSDK ASUS	7.2	0%	Jul 15	Permissive Cross-domain Security Policy with Untrusted Domains in ASUS GameSDK allows a remote user to obtain a local user’s NTLM hash by convincing the user to visit a crafted…
CVE-2026-11851	RO Router ASUS	5.9	0%	Jul 15	Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web management interface of certain ASUS router models allows a remote authenticated…
CVE-2022-4989	AS AI Suite 3 ASUS	8.5	0%	Jul 3	UNSUPPORTED WHEN ASSIGNED Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows a local user to access unintended memory regions via…
CVE-2022-4990	AS AI Suite 3 ASUS	7.3	0%	Jul 3	UNSUPPORTED WHEN ASSIGNED Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows a local user to bypass security validation and access…
CVE-2026-8921	AB ASUS Business Manager ASUS	8.5	0%	Jul 3	External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user to execute arbitrary code with SYSTEM privileges via a tampered IPC message
CVE-2026-12960	RA Router app ASUS	6.0	0%	Jul 3	An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS…
CVE-2026-8918	AC Armoury Crate ASUS	7.1	0%	Jun 22	A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or cause a system crash (BSOD) by…
CVE-2026-7480	AS ASUS System Control Interface ASUS	7.3	0%	May 29	An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute arbitrary…
CVE-2026-8070	AC Armoury Crate ASUS	7.3	0%	May 29	Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s validation mechanism, resulting in unauthorized read and write…
CVE-2026-3508	AS ASUS System Control Interface ASUS	6.8	0%	May 8	An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows a local user to cause system crash (BSOD) via a read size that exceeds the buffer…
CVE-2026-6737	AS AsusPTPFilter ASUS	2.0	0%	May 8	An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a local user to bypass driver security mechanisms and obtain restricted touchpad…
CVE-2026-3428	MC Member Center(华硕大厅) ASUS	5.4	0%	Apr 16	A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center(华硕大厅) allows a local user to achieve privilege escalation to Administrator via…
CVE-2026-1880	DR DriverHub ASUS	5.4	0%	Apr 16	An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required…
CVE-2025-15101	AF Asus Firmware Asus	8.8	1%	Mar 26	An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authenticated administrators to execute arbitrary system commands…
CVE-2025-12793	MY Myasus Asus	7.8	0%	Jan 6	An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent
CVE-2025-59374 In wildKEV	LU live update ASUS	9.8	1%	Dec 17	ASUS Live Update Embedded Malicious Code Vulnerability
CVE-2025-59367	DF Dsl-n16 Firmware Asus	9.8	1%	Nov 13	An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access into the affected system
CVE-2024-55408	AS ASCI ASUS	5.3	0%	Jan 6	An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL requests are supplied
CVE-2024-13062	RO Router ASUS	7.2	1%	Jan 2	An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution
CVE-2024-12912	RO Router ASUS	7.2	1%	Jan 2	An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution
CVE-2024-31161	DM Download Master Asus	7.2	1%	Jun 14	The upload functionality of ASUS Download Master does not properly filter user input
CVE-2024-31160	DM Download Master Asus	4.8	0%	Jun 14	The parameter used in the certain page of ASUS Download Master is not properly filtered for user input
CVE-2024-31159	DM Download Master Asus	4.8	0%	Jun 14	The parameter used in the certain page of ASUS Download Master is not properly filtered for user input
CVE-2024-33220	AS AI Suite Asus	8.8	1%	May 22	An issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrary code via sending crafted…
CVE-2024-33219	SX Sabertooth X99 Firmware Asus	7.8	0%	May 22	An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute arbitrary code via sending…