CVE-2026-1880 | BDVDB-2026-327349 Detail

Description#

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows the altered resource to pass system checks and be executed with elevated privileges upon a user-initiated update. Refer to the 'Security Update for ASUS DriverHub' section on the ASUS Security Advisory for more information.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-04-16Record published in the CVE List.
2. Version 22026-09-17Most recent update recorded in the CVE List.