CVE-2026-75808

ASUS Armoury Crate is affected by an allocation of resources without limits or throttling flaw. A local user with low privileges can bypass driver authentication and allocate an unrestricted amount of system memory, leading to a denial-of-service condition through memory exhaustion. The attack ve...

CVE-2026-75808

Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-service condition through system memory exhaustion by bypassing driver authentication and allocating an unrestricted amount of memory.Refer to the ' Security Update for Armoury Crat...

CVE-2026-75809

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury...

CVE-2026-75809

ASUS Armoury Crate is affected by an insufficient access control vulnerability in its exposed IOCTL interface. A local user with low privileges can bypass driver authentication to read from and write to PCIe configuration space , enabling information disclosure and the disabling of device functio...

EUVD-2026-72619

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury...

EUVD-2026-72618

Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interrupts SMIs. Repeatedly triggering SMI may lead to a denial-of-service DoS condition.Refer to the '...

CVE-2026-75810

ASUS Armoury Crate contains an exposed dangerous method or function that allows a local user to bypass driver authentication and send requests to trigger system management interrupts (SMIs) . A single trigger causes a brief system stall; repeatedly triggering SMIs can escalate to a denial-of-serv...

CVE-2026-75810

Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interrupts SMIs. Repeatedly triggering SMI may lead to a denial-of-service DoS condition.Refer to the '...

CVE-2026-75811

Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and potentially cause hardware damage by bypassing driver authentication and accessing critical model-specific registers.Refer to the ' Security...

CVE-2026-75811

ASUS Armoury Crate is affected by an improper restriction of software interfaces to hardware features , allowing a local user with low privileges to bypass driver authentication and access critical model-specific registers . This can lead to modification of hardware configuration settings and pot...

EUVD-2026-72616

Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and potentially cause hardware damage by bypassing driver authentication and accessing critical model-specific registers.Refer to the ' Security...

PT-2026-86974

Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...

SUSE CVE-2026-80774

In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

CVE-2026-80774

CVE-2026-80774 affects the Linux kernel in the HID asus driver. The root cause is that to_usb_interface() is called without first verifying the device is genuinely USB via hid_is_usb(). Because the uhid subsystem can create devices that report BUS_USB but lack an actual USB parent, this unchecked...

EUVD-2026-71417

In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

CVE-2026-80774 HID: asus: fix missing hid_is_usb() check

In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

CVE-2026-80774

In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

CVE-2026-75754

Missing Authentication for Critical Function, Server-Side Request Forgery SSRF, and Use of Hard-coded Credentials in ASUS Control Center allow an unauthorized user to obtain the encryption key via an HTTP request, causing a local service to enable SSH on port 2222. The attacker can then log in wi...

EUVD-2026-70865

Missing Authentication for Critical Function, Server-Side Request Forgery SSRF, and Use of Hard-coded Credentials in ASUS Control Center allow an unauthorized user to obtain the encryption key via an HTTP request, causing a local service to enable SSH on port 2222. The attacker can then log in wi...

CVE-2026-75754

ASUS Control Center is affected by a combination of Missing Authentication for Critical Function , Server-Side Request Forgery (SSRF) , and Use of Hard-coded Credentials . An unauthorized network-based attacker with no prior privileges can obtain the encryption key via an HTTP request , causing a...