p PatchFirst

CVE-2026-102438

CVE-2026-102438

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process. Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.

CVSS 8.5 · High · EPSS 0.1%

Published
Updated

Affected products and versions

  • armoury crate

    Versions
    • ≥ V3.0.0., ≤ V6.5.10: Affected (custom)

    No fix published

  • armoury crate se

    Versions
    • ≥ V2.1.17, ≤ V2.2.17: Affected (custom)

    No fix published

Original sources

Check your server →