CVE-2026-102438 — ASUS / Armoury Crate

CVE-2026-102438

ASUS / Armoury Crate PUBLISHED

Description (CNA)

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process. Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.

Affected (CNA)

Vendor / product	Versions
ASUS / Armoury Crate	affected V3.0.0. through V6.5.10
ASUS / Armoury Crate SE	affected V2.1.17 through V2.2.17

CWE

CWE-427

References

https://www.asus.com/security-advisory

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.