Lucene search
K

29 matches found

RedhatCVE
RedhatCVE
added 5 days ago6 views

CVE-2026-1880

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows t...

5.4CVSS5.7AI score0.00007EPSS
Exploits1References1
GithubExploit
GithubExploit
added 2026/04/16 10:37 a.m.101 views

Exploit for CVE-2026-1880

CVE-2026-1880 Your browser does not support embedded video...

5.4CVSS5.8AI score0.00007EPSS
Exploits1
NVD
NVD
added 2026/04/16 3:16 a.m.1 views

CVE-2026-1880

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows t...

5.4CVSS0.00007EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/04/16 2:0 a.m.1 views

CVE-2026-1880

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows t...

5.4CVSS6AI score0.00007EPSS
Exploits1References1
EUVD
EUVD
added 2026/04/16 2:0 a.m.2 views

EUVD-2026-23155

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows t...

5.4CVSS6AI score0.00007EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/04/16 2:0 a.m.2 views

CVE-2026-1880

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows t...

5.4CVSS6AI score0.00007EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/16 12:0 a.m.3 views

ASUS DriverHub 安全漏洞

ASUS DriverHub is an official driver management tool developed by ASUS Corporation in China. It supports automatic detection and installation of device drivers. ASUS DriverHub has a security vulnerability, which stems from improper permission allocation, potentially leading to privilege escalatio...

5.4CVSS5.8AI score0.00007EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/16 12:0 a.m.0 views

PT-2026-33244

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows t...

5.4CVSS6AI score0.00007EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-14095

Malicious code in bioql PyPI...

9.4CVSS9.3AI score0.0048EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-14097

Malicious code in bioql PyPI...

8.4CVSS9.3AI score0.00344EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/08/08 12:0 a.m.1 views

The vulnerability of the ASUS DriverHub tool for installing and updating drivers is related to errors in the authentication process. This vulnerability allows a perpetrator to cause service interruptions.

The vulnerability of the ASUS DriverHub tool for installing and updating drivers is related to errors in the authentication process. Exploiting this vulnerability could allow a malicious actor to trigger service failures through specially crafted HTTP requests...

10CVSS8.1AI score0.0048EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/06/04 12:0 a.m.11 views

ASUS DriverHub < 1.0.6.0 Multiple Vulnerabilities

ASUS DriverHub, a driver management tool, installed on the the remote host is a version prior to 1.0.6.0 and, therefore, is affected by multiple vulnerabilities: - An insufficient validation in ASUS DriverHub may allow unauthorized sources to interact with the software's features via crafted HTTP...

9.4CVSS8.7AI score0.0048EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/06/04 12:0 a.m.3 views

ASUS DriverHub Installed (Windows)

Binary data asusdriverhubwininstalled.nbin...

7.3AI score
Exploits0References1
The Hacker News
The Hacker News
added 2025/05/12 2:3 p.m.25 views

ASUS Patches DriverHub RCE Flaws Exploitable via HTTP and Crafted .ini Files

ASUS has released updates to address two security flaws impacting ASUS DriverHub that, if successfully exploited, could enable an attacker to leverage the software in order to achieve remote code execution. DriverHub is a tool that's designed to automatically detect the motherboard model of a...

9.4CVSS8.4AI score0.0048EPSS
Exploits0
NCSC
NCSC
added 2025/05/12 1:22 p.m.2 views

Vulnerabilities fixed in ASUS DriverHub

ASUS fixed vulnerabilities in ASUS DriverHub The vulnerabilities are in the way ASUS DriverHub processes HTTP requests. DriverHub is a tool from ASUS which runs in the background and ensures that system drivers are kept up to date. Untrusted sources can use specially crafted HTTP requests to...

9.4CVSS9.7AI score0.0048EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/11 6:18 a.m.13 views

CVE-2025-3462

"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation in ASUS DriverHub may allow unauthorized sources to interact with the software's features via crafted HTTP requests. Refer to the 'Security Update for ASUS...

8.4CVSS6.9AI score0.00344EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/11 6:18 a.m.9 views

CVE-2025-3463

"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation vulnerability in ASUS DriverHub may allow untrusted sources to affect system behavior via crafted HTTP requests. Refer to the 'Security Update for ASUS DriverHub'...

9.4CVSS6.9AI score0.0048EPSS
Exploits0References1
NVD
NVD
added 2025/05/09 6:15 a.m.8 views

CVE-2025-3463

"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation vulnerability in ASUS DriverHub may allow untrusted sources to affect system behavior via crafted HTTP requests. Refer to the 'Security Update for ASUS DriverHub'...

9.4CVSS0.0048EPSS
Exploits0References2
NVD
NVD
added 2025/05/09 6:15 a.m.8 views

CVE-2025-3462

"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation in ASUS DriverHub may allow unauthorized sources to interact with the software's features via crafted HTTP requests. Refer to the 'Security Update for ASUS...

8.4CVSS0.00344EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/05/09 5:37 a.m.14 views

CVE-2025-3463

"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation vulnerability in ASUS DriverHub may allow untrusted sources to affect system behavior via crafted HTTP requests. Refer to the 'Security Update for ASUS DriverHub'...

9.4CVSS0.0048EPSS
Exploits0References1
Rows per page
Query Builder