Description
**UNSUPPORTED WHEN ASSIGNED** Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitrary IOCTLs, resulting in privilege escalation.
Refer to the 'End-of-Life Notice and Driver Update for Legacy ASUS Drivers ' section on the ASUS Security Advisory for more information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ASUS | AURA SYNC | < 1.07.84 | 1.07.84 |
Advisories 1
- VA-26-202-01 ASUS AURA SYNC driver local privilege escalation CISA ICS & IT advisories · Jul 21, 2026