Asus Armoury Crate vulnerabilities

CVE-2026-18023 [MEDIUM] CWE-226 CVE-2026-18023: Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a loc Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uninitialized memory via a crafted IOCTL request that bypasses the driver's security verification mechanism. Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory fo

CVE-2026-16006 [MEDIUM] CWE-497 CVE-2026-16006: Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver a Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL request by bypassing the driver's verification, potentially providing further insight into the kernel memory layout.Refer to the ' Security Update for Armoury Crate App ' sectio

CVE-2026-75810 [MEDIUM] CWE-749 CVE-2026-75810: Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief syste Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interrupts (SMIs). Repeatedly triggering SMI may lead to a denial-of-service (DoS) condition.Refer to the ' Security Update for Armoury Crate App ' section on

CVE-2025-11775 [MEDIUM] CWE-125 CVE-2025-11775: An out-of-bounds read vulnerability has been identified in the asComSvc service. This vulnerability An out-of-bounds read vulnerability has been identified in the asComSvc service. This vulnerability can be triggered by sending specially crafted requests, which may lead to a service crash or partial loss of functionality. This vulnerability only affects ASUS motherboard series products. Refer to the 'Security Update for Armoury Crate App' section o

CVE-2026-16003 [LOW] CWE-782 CVE-2026-16003: Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request by bypassing the driver's verification.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.