Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-102438

Local DLL Hijacking in ASUS Armoury Crate for SYSTEM Privilege Execution

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process. Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Asus
Products
Armoury Crate Armoury Crate Se
CVE-2022-38699

ASUS Armoury Crate Service - Arbitrary File Creation via Elevation of Privilege Flaw

Armoury Crate Service’s logging function has insufficient validation to check if the log file is a symbolic link. A physical attacker with general user privilege can modify the log file property to a symbolic link that points to arbitrary system file, causing the logging function to overwrite the system file and disrupt the system.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Asus
Products
Armoury Crate Service