Skip to content
OpenAdvisories
High VA-26-202-01 1 CVE

ASUS AURA SYNC driver local privilege escalation

Published Jul 21, 2026 · Updated Jul 21, 2026

Vendor: ASUS Product: AURA SYNC

Summary

Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitrary IOCTLs, resulting in privilege escalation.

Vulnerabilities 1

  • High 7.3
    CVE-2019-25764

    **UNSUPPORTED WHEN ASSIGNED**  Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a loc…

    ASUS AURA SYNC

Revision history

  1. #1.0.0

    Initial publication