ASUS Armoury Crate vulnerabilities, page 2
25 vulnerabilities
Known vulnerabilities in ASUS Armoury Crate, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2026-12962asus · armoury crateasus armoury crateA Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted web page that sends a request containing a UNC path to the application's local service endpoint.Refer to the '
Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.EPSS0.36%HighCVE-2026-8070asus · armoury crateasus armoury crateIncorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s validation mechanism, resulting in unauthorized read and write access to physical memory.Refer to the '
Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.EPSS0.11%HighCVE-2026-8918asus · armoury crateasus armoury crateA permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or cause a system crash (BSOD) by bypassing the validation mechanism.Refer to the '
Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.EPSS0.28%HighCVE-2023-26911asus · armoury crate +1 moreasus armoury crateASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.EPSS0.20%CriticalCVE-2023-5716asus · armoury crateASUS Armoury Crate - Arbitrary File WriteASUS Armoury Crate has a vulnerability in arbitrary file write and allows remote attackers to access or modify arbitrary files by sending specific HTTP requests without permission.EPSS0.63%