Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 5 days ago5 views

CVE-2026-3428

A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center华硕大厅 allows a local user to achieve privilege escalation to Administrator via exploitation of a Time-of-check Time-of-use TOC-TOU during the update process, where an unexpected payload is substitut...

5.4CVSS5.5AI score0.00004EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/16 3:31 a.m.1 views

EUVD-2026-23158

A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center华硕大厅 allows a local user to achieve privilege escalation to Administrator via exploitation of a Time-of-check Time-of-use TOC-TOU during the update process, where an unexpected payload is substitut...

5.4CVSS5.8AI score0.00004EPSS
Exploits0References2
NVD
NVD
added 2026/04/16 3:16 a.m.1 views

CVE-2026-3428

A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center华硕大厅 allows a local user to achieve privilege escalation to Administrator via exploitation of a Time-of-check Time-of-use TOC-TOU during the update process, where an unexpected payload is substitut...

5.4CVSS0.00004EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/16 2:2 a.m.3 views

CVE-2026-3428

A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center华硕大厅 allows a local user to achieve privilege escalation to Administrator via exploitation of a Time-of-check Time-of-use TOC-TOU during the update process, where an unexpected payload is substitut...

5.4CVSS5.8AI score0.00004EPSS
Exploits0References1
CVE
CVE
added 2026/04/16 2:2 a.m.6 views

CVE-2026-3428

CVE-2026-3428 affects the ASUS Member Center update modules. It enables local privilege escalation to Administrator via a TOC-TOU vulnerability in the update process: after a download, an unexpected payload can substitute the legitimate one and then execute with administrative privileges after us...

5.4CVSS5.8AI score0.00004EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/16 2:2 a.m.20 views

CVE-2026-3428

A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center华硕大厅 allows a local user to achieve privilege escalation to Administrator via exploitation of a Time-of-check Time-of-use TOC-TOU during the update process, where an unexpected payload is substitut...

5.4CVSS0.00004EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/16 12:0 a.m.4 views

ASUS Member Center 安全漏洞

ASUS Member Center is a membership management and service platform provided by ASUS Corporation in China. There is a security vulnerability in ASUS Member Center. This vulnerability stems from time checks in the update module and usage race conditions, which may lead to privilege escalation...

5.4CVSS5.8AI score0.00004EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/16 12:0 a.m.1 views

PT-2026-33245

A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center华硕大厅 allows a local user to achieve privilege escalation to Administrator via exploitation of a Time-of-check Time-of-use TOC-TOU during the update process, where an unexpected payload is substitut...

5.4CVSS5.8AI score0.00004EPSS
Exploits0References1
Rows per page
Query Builder