CVE-2026-16003 | BDVDB-2026-368965 Detail
ASUSArmoury Crate
Description#
Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request by bypassing the driver's verification.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
Impact#
Per CVSS v4.0: confidentiality impact none, integrity impact low, availability impact none. Attack vector: local.
Weaknesses#
- CWE-782 Exposed IOCTL with Insufficient Access Control
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.