8.5Alta
CVE-2026-102438
Descripción
An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process. Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
Debilidad (CWE):
CWE-427
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| ASUS | Armoury Crate | V3.0.0. – ≤ V6.5.10 | |
| ASUS | Armoury Crate SE | V2.1.17 – ≤ V2.2.17 |