EUVD-2026-72624

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request by bypassing the driver's verification.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS...

CVE-2026-16004

Armoury Crate driver (ASUS) contains an exposed IOCTL with insufficient access control that allows a local user with low privileges to read and write arbitrary PCI/PCIe configuration space by crafting IOCTL requests that bypass the driver's verification. The CVSS 4.0 base score is 5.8 (MEDIUM) , ...

CVE-2026-16004

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by bypassing the driver's verification. Refer to the ' Security Update for Armoury Crate App' section on the ASUS Security...

CVE-2026-16005

Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the driver's verification, which can corrupt data structures and cause a system crash BSOD.Refer to the ' Security Update for Armoury Crate App '...

CVE-2026-16006

CVE-2026-16006 is an exposure of sensitive system information vulnerability in the ASUS Armoury Crate driver . A local user with low privileges can send a crafted IOCTL request that bypasses the driver's verification mechanism, allowing them to obtain kernel virtual addresses and gain insight int...