AC
Product
Armoury Crate
25
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 11Medium 12Low 1
Watch
Add Armoury Crate to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5716 | 9.8 | Jan 19 | ASUS Armoury Crate - Arbitrary File Write Affected: V4.0.1.3 |
| CVE-2026-102438 | 8.5 | Oct 20 | An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link… Affected: V3.0.0. through V6.5.10 |
| CVE-2025-9968 | 8.5 | Oct 13 | A link following vulnerability exists in the UnifyScanner component of Armoury Crate Affected: before 6.3.4 |
| CVE-2025-3464 | 8.4 | Jun 16 | A race condition vulnerability exists in Armoury Crate Affected: v5.9.9.0~v6.1.18 |
| CVE-2024-12957 | 8.4 | Jan 23 | A file handling command vulnerability in certain versions of Armoury Crate may result in arbitrary file deletion Affected: V2.3.4.0~V5.9.9.0 |
| CVE-2025-1533 | 8.2 | May 12 | A stack buffer overflow has been identified in the AsIO3.sys driver Affected: V6.1.13 and earlier |
| CVE-2023-26911 | 7.8 | Jul 26 | ASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path vulnerability which allows local users to launch processes with elevated… Affected: through 5.3.4.0 |
| CVE-2022-42455 | 7.8 | Feb 15 | ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and shipped with multiple ASUS software products, contains… Affected: before 5.3.4.1 |
| CVE-2026-16727 | 7.3 | Jul 30 | Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated… Affected: V5.4.1 through V6.4.12 |
| CVE-2026-8070 | 7.3 | May 29 | Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s validation mechanism, resulting in unauthorized read and write… Affected: through 6.4.12 |
| CVE-2025-9338 | 7.3 | Nov 6 | A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver Affected: 6.2.11 and earlier |
| CVE-2026-8918 | 7.1 | Jun 22 | A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or cause a system crash (BSOD) by… Affected: through 6.4.12 |
| CVE-2025-9337 | 6.8 | Oct 13 | A null pointer dereference has been identified in the AsIO3.sys driver Affected: Before v6.3.4 |
| CVE-2025-9336 | 6.8 | Oct 13 | A stack buffer overflow has been identified in the AsIO3.sys driver Affected: Before v6.3.4 |
| CVE-2026-16004 | 5.9 | Sep 8 | Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by… Affected: through 6.5.7 |
| CVE-2026-75809 | 5.9 | Sep 8 | Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver… Affected: through 6.5.7 |
| CVE-2026-16005 | 5.8 | Sep 8 | Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the driver's verification,… Affected: through 6.5.7 |
| CVE-2026-75811 | 5.8 | Sep 8 | Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and potentially cause hardware… Affected: through 6.5.7 |
| CVE-2026-18023 | 5.7 | Sep 8 | Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uninitialized memory via a… Affected: through 6.5.7 |
| CVE-2026-16006 | 5.7 | Sep 8 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL… Affected: through 6.5.7 |
| CVE-2026-75808 | 5.7 | Sep 8 | Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-service condition through system memory exhaustion by bypassing… Affected: through 6.5.7 |
| CVE-2026-75810 | 5.7 | Sep 8 | Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger… Affected: through 6.5.7 |
| CVE-2026-12962 | 5.3 | Sep 8 | A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted… Affected: through 6.5.7.0 |
| CVE-2025-11775 | 4.8 | Dec 17 | An out-of-bounds read vulnerability has been identified in the asComSvc service Affected: v6.3.4 and earlier |
| CVE-2026-16003 | 2.0 | Sep 8 | Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL… Affected: through 6.5.7 |
Showing 25