High severity · published Oct 13, 2025
CVE-2025-9968
A link following vulnerability exists in the UnifyScanner component of Armoury Crate
8.5
CVSS
0.2%
EPSS
No
On KEV
Description
A link following vulnerability exists in the UnifyScanner component of Armoury Crate. This vulnerability may be triggered by creating a specially crafted junction, potentially leading to local privilege escalation.
For more information, please refer to section 'Security Update for Armoury Crate App' in the ASUS Security Advisory.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Armoury Crate · ASUS
before 6.3.4 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-9968
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-9968
www.asus.com
https://www.asus.com/security-advisory/
More from Armoury Crate
9.8
CVE-2023-5716
ASUS Armoury Crate - Arbitrary File Write
8.5
CVE-2026-102438
An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link…
8.4
CVE-2025-3464
A race condition vulnerability exists in Armoury Crate
8.4
CVE-2024-12957
A file handling command vulnerability in certain versions of Armoury Crate may result in arbitrary file deletion
8.2
CVE-2025-1533
A stack buffer overflow has been identified in the AsIO3.sys driver