CVE-2026-102438: High severity ASUS Armoury Crate vulnerability
An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process. Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A local user is required to exploit the vulnerability. The issue can allow that user to execute code with SYSTEM privileges.
What does exploitation involve?
Exploitation involves replacing a DLL that is later loaded by a high-privilege Armoury Crate process. The vulnerability is an uncontrolled search path element issue.
How can I determine whether an endpoint is affected?
Check whether ASUS Armoury Crate is installed and consult the ASUS Security Advisory, specifically its “Security Update for Armoury Crate App” section, for affected-product and remediation details.