ASUS

88 results · Clear filters · Feed

• High 7.1
  CVE-2026-88707

  An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request co…

  ASUS Router firmware
  Nov 10, 2026
• High 8.7
  CVE-2026-88710

  Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an unauthentic…

  ASUS Router firmware
  Nov 10, 2026
• High 7.0
  CVE-2026-88709

  Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an user with p…

  ASUS Router firmware
  Nov 10, 2026
• High 7.2
  CVE-2026-84729

  Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the i…

  ASUS Router firmware
  Nov 4, 2026
• High 8.7
  CVE-2026-84730

  Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitr…

  ASUS Router firmware
  Nov 4, 2026
• High 8.5
  CVE-2026-112116

  An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user …

  ASUS System Control Interface
  Nov 4, 2026
• High 7.7
  CVE-2026-75775

  Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute…

  ASUS Router
  Oct 23, 2026
• High 8.7
  CVE-2026-93489 Public exploit

  Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge …

  ASUS Router
  Oct 23, 2026
• High 8.6
  CVE-2026-75779

  Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forge…

  ASUS Router
  Oct 23, 2026
• High 8.2
  CVE-2026-17518

  Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corru…

  ASUS Router
  Oct 20, 2026
• High 8.5
  CVE-2026-102438

  An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code wi…

  ASUS Armoury Crate Armoury Crate SE
  Oct 20, 2026
• High 7.7
  CVE-2026-19396

  A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE…

  ASUS Router
  Oct 7, 2026
• High 8.4
  CVE-2026-16528

  Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker t…

  ASUS Router
  Oct 7, 2026
• High 8.9
  CVE-2026-13313

  An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP…

  ASUS Router
  Oct 1, 2026
• High 7.0
  CVE-2026-93495

  Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary m…

  ASUS Motherboard(ROG MAXIMUS XI APEX ) Motherboard(PRIME Z390-A ) Motherboard(ROG STRIX Z390-E GAMING )
  Oct 1, 2026
• High 7.7
  CVE-2026-19397

  Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby us…

  ASUS Control Center Express Agent
  Sep 8, 2026
• High 8.4
  CVE-2026-8917

  Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a…

  ASUS GPUTweakII VGAdll GPU Tweak III
  Aug 11, 2026
• High 7.3
  CVE-2026-16727

  Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in ASUS Armoury Crate allow…

  ASUS Armoury Crate
  Jul 30, 2026
• High 7.3
  CVE-2019-25764

  **UNSUPPORTED WHEN ASSIGNED**  Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a loc…

  ASUS AURA SYNC
  Jul 17, 2026
• High 8.4
  CVE-2026-15029

  Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Man…

  ASUS System Control Interface Business Manager System Control Interface v3
  Jul 15, 2026
• High 8.2
  CVE-2026-13585 Public exploit

  Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in…

  ASUS System Control Interface System Control Interface v3 Business Manager
  Jul 15, 2026
• High 8.5
  CVE-2026-8920

  Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Name or Path in Aura W…

  ASUS Aura Wallpaper Service
  Jul 15, 2026
• High 7.2
  CVE-2026-8919

  Permissive Cross-domain Security Policy with Untrusted Domains in ASUS GameSDK allows a remote user to obtain a local u…

  ASUS GameSDK
  Jul 15, 2026
• High 8.5
  CVE-2022-4989

  ** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows…

  ASUS AI Suite 3
  Jul 3, 2026
• High 7.3
  CVE-2022-4990

  ** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows…

  ASUS AI Suite 3
  Jul 3, 2026
• High 8.5
  CVE-2026-8921

  External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user to execute arbitrary c…

  ASUS ASUS Business Manager
  Jul 3, 2026
• High 7.1
  CVE-2026-8918

  A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read…

  ASUS Armoury Crate
  Jun 22, 2026
• High 7.3
  CVE-2026-7480

  An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local …

  ASUS ASUS System Control Interface
  May 29, 2026
• High 7.3
  CVE-2026-8070

  Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s val…

  ASUS Armoury Crate
  May 29, 2026
• High 8.6
  CVE-2025-15101

  An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authe…

  ASUS Router
  Mar 26, 2026
• High 8.5
  CVE-2025-13348

  An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager. This vulnerabili…

  ASUS ASUS Business Manager
  Feb 2, 2026
• High 8.5
  CVE-2025-12793

  An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent. A local attacker may influence the a…

  ASUS ASCI
  Jan 6, 2026
• High 7.0
  CVE-2025-11901

  An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760…

  ASUS H470 series H610 series B460 series
  Dec 17, 2025
• High 7.5
  CVE-2025-59371

  An authentication bypass vulnerability has been identified in the IFTTT integration feature. A remote, authenticated at…

  ASUS Router
  Nov 25, 2025
• High 7.5
  CVE-2025-59370

  A command injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vu…

  ASUS Router
  Nov 25, 2025
• High 8.2
  CVE-2025-12003

  A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impac…

  ASUS Router
  Nov 25, 2025
• High 8.5
  CVE-2025-59373

  A local privilege escalation vulnerability exists in the restore mechanism of ASUS System Control Interface. It can be …

  ASUS MyASUS
  Nov 25, 2025
• High 7.3
  CVE-2025-9338

  A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver. This vulnerabilit…

  ASUS Armoury Crate
  Nov 6, 2025
• High 8.5
  CVE-2025-9968

  A link following vulnerability exists in the UnifyScanner component of Armoury Crate. This vulnerability may be trigger…

  ASUS Armoury Crate
  Oct 13, 2025
• High 7.7
  CVE-2025-4569

  An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token …

  ASUS MyASUS
  Jul 21, 2025