Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-102438

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link librar

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ASUS

Description

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process. Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ASUS Armoury Crate

Default version status: unaffected

  • V3.0.0. to ≤ V6.5.10affected

ASUS Armoury Crate SE

Default version status: unaffected

  • V2.1.17 to ≤ V2.2.17affected

References