Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-110464 EUVD-2026-116690GHSA-rgm6-8j38-pvgr

Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local S…

Published Nov 4, 2026 · Updated Nov 4, 2026 · Assigned by ASUS

Description

Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local System privileges, or to cause a recoverable system crash, via the service's exposed inter-process interface.
Refer to the '
Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.

Affected products

VendorProductAffectedFixed
ASUS Armoury Crate v5.4.10 – ≤ v6.5.14 —

References