ASUS

190 results · Feed

• Medium 5.6
  CVE-2026-15030

  Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows…

  ASUS System Control Interface System Control Interface v3 Business Manager
  Jul 15, 2026
• High 8.2
  CVE-2026-13585 Public exploit

  Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in…

  ASUS System Control Interface Business Manager System Control Interface v3
  Jul 15, 2026
• High 8.5
  CVE-2026-8920

  Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Name or Path in Aura W…

  ASUS Aura Wallpaper Service
  Jul 15, 2026
• High 7.2
  CVE-2026-8919

  Permissive Cross-domain Security Policy with Untrusted Domains in ASUS GameSDK allows a remote user to obtain a local u…

  ASUS GameSDK
  Jul 15, 2026
• Medium 5.9
  CVE-2026-11851

  Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web management interface of…

  ASUS Router
  Jul 15, 2026
• High 8.5
  CVE-2022-4989

  ** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows…

  ASUS AI Suite 3
  Jul 3, 2026
• High 7.3
  CVE-2022-4990

  ** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows…

  ASUS AI Suite 3
  Jul 3, 2026
• High 8.5
  CVE-2026-8921

  External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user to execute arbitrary c…

  ASUS ASUS Business Manager
  Jul 3, 2026
• Medium 6.0
  CVE-2026-12960 Public exploit

  An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application …

  ASUS Router app
  Jul 3, 2026
• High 7.1
  CVE-2026-8918

  A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read…

  ASUS Armoury Crate
  Jun 22, 2026
• High 7.3
  CVE-2026-7480

  An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local …

  ASUS ASUS System Control Interface
  May 29, 2026
• High 7.3
  CVE-2026-8070

  Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s val…

  ASUS Armoury Crate
  May 29, 2026
• Medium 6.8
  CVE-2026-3508

  An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows a local user to cause …

  ASUS ASUS System Control Interface
  May 8, 2026
• Low 2.0
  CVE-2026-6737

  An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a local user to bypass driver s…

  ASUS AsusPTPFilter
  May 8, 2026
• Medium 5.4
  CVE-2026-3428

  A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center(华硕大厅) allows a loc…

  ASUS Member Center(华硕大厅)
  Apr 16, 2026
• Medium 5.4
  CVE-2026-1880 Public exploit

  An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows priv…

  ASUS DriverHub
  Apr 16, 2026
• High 8.6
  CVE-2025-15101

  An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authe…

  ASUS Router
  Mar 26, 2026
• Medium 6.9
  CVE-2025-15038

  An Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can…

  ASUS ASUS Business System Control Interface
  Mar 12, 2026
• Medium 5.4
  CVE-2026-1878

  An Insufficient Integrity Verification vulnerability in the ASUS ROG peripheral driver installation process allows priv…

  ASUS Driver( Headset ) Driver( Keyboard & Mouse )
  Mar 12, 2026
• Medium 6.8
  CVE-2025-15037

  An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vuln…

  ASUS ASUS Business System Control Interface
  Mar 12, 2026
• High 8.5
  CVE-2025-13348

  An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager. This vulnerabili…

  ASUS ASUS Business Manager
  Feb 2, 2026
• High 8.5
  CVE-2025-12793

  An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent. A local attacker may influence the a…

  ASUS ASCI
  Jan 6, 2026
• Critical 9.3
  CVE-2025-59374 Exploited

  "UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifica…

  ASUS live update
  Dec 17, 2025

  KEV Dec 17, 2025
• Medium 4.8
  CVE-2025-11775

  An out-of-bounds read vulnerability has been identified in the asComSvc service. This vulnerability can be triggered by…

  ASUS Armoury Crate
  Dec 17, 2025
• High 7.0
  CVE-2025-11901

  An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760…

  ASUS Z790 series H470 series H610 series
  Dec 17, 2025
• Medium 6.9
  CVE-2025-59372

  A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exp…

  ASUS Router
  Nov 25, 2025
• High 7.5
  CVE-2025-59371

  An authentication bypass vulnerability has been identified in the IFTTT integration feature. A remote, authenticated at…

  ASUS Router
  Nov 25, 2025
• High 7.5
  CVE-2025-59370

  A command injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vu…

  ASUS Router
  Nov 25, 2025
• Medium 5.9
  CVE-2025-59369

  A SQL injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulner…

  ASUS Router
  Nov 25, 2025
• Medium 6.0
  CVE-2025-59368

  An integer underflow vulnerability has been identified in Aicloud. An authenticated attacker may trigger this vulnerabi…

  ASUS Router
  Nov 25, 2025
• High 8.2
  CVE-2025-12003

  A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impac…

  ASUS Router
  Nov 25, 2025
• Medium 6.9
  CVE-2025-59365

  A stack buffer overflow vulnerability has been identified in certain router models. An authenticated attacker may trigg…

  ASUS Router
  Nov 25, 2025
• Critical 9.2
  CVE-2025-59366 EPSS 12%

  An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side eff…

  ASUS Router
  Nov 25, 2025
• High 8.5
  CVE-2025-59373

  A local privilege escalation vulnerability exists in the restore mechanism of ASUS System Control Interface. It can be …

  ASUS MyASUS
  Nov 25, 2025
• Critical 9.3
  CVE-2025-59367

  An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to…

  ASUS DSL-AC51 DSL-AC750 DSL-N16
  Nov 13, 2025
• High 7.3
  CVE-2025-9338

  A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver. This vulnerabilit…

  ASUS Armoury Crate
  Nov 6, 2025
• Medium 6.8
  CVE-2025-9337

  A null pointer dereference has been identified in the AsIO3.sys driver. The vulnerability can be triggered by a special…

  ASUS Armoury Crate
  Oct 13, 2025
• Medium 6.8
  CVE-2025-9336

  A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manip…

  ASUS Armoury Crate
  Oct 13, 2025
• High 8.5
  CVE-2025-9968

  A link following vulnerability exists in the UnifyScanner component of Armoury Crate. This vulnerability may be trigger…

  ASUS Armoury Crate
  Oct 13, 2025
• Medium 6.7
  CVE-2025-6398

  A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be …

  ASUS AI Suite
  Aug 1, 2025