CVE-2026-1880

The CVE-2026-1880 entry concerns an Incorrect Permission Assignment for a Critical Resource in the ASUS DriverHub update process. The vulnerability arises from improper protection of required execution resources during the validation phase, enabling a local user to make unprivileged modifications...

EUVD-2025-14095

Malicious code in bioql PyPI...

The vulnerability of the ASUS DriverHub tool for installing and updating drivers is related to deficiencies in the data source verification mechanism. This allows a hacker to execute arbitrary code.

The vulnerability of the ASUS DriverHub tool for installing and updating drivers is related to deficiencies in the data source verification mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code with administrator privileges remotely...

CVE-2025-3463

"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation vulnerability in ASUS DriverHub may allow untrusted sources to affect system behavior via crafted HTTP requests. Refer to the 'Security Update for ASUS DriverHub'...

CVE-2025-3463

CVE-2025-3463 concerns ASUS DriverHub, a driver-management tool. The issue is an insufficient validation in handling HTTP requests (and related certificate handling in some reports) that could allow an untrusted source to influence driver updates or software behavior, potentially enabling remote ...

CVE-2025-3463

"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation vulnerability in ASUS DriverHub may allow untrusted sources to affect system behavior via crafted HTTP requests. Refer to the 'Security Update for ASUS DriverHub'...

PT-2025-20479

Name of the Vulnerable Software and Affected Versions ASUS DriverHub versions prior to 1.0.6.0 Description An insufficient validation issue exists in ASUS DriverHub. This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints. The issue may allow...