CVE-2026-110464: Medium severity vulnerability
Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local System privileges, or to cause a recoverable system crash, via the service's exposed inter-process interface. Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems running ASUS Armoury Crate with its affected service and exposed inter-process interface are exposed. Exploitation requires local access and low-privileged access; no user interaction is required.
What could a successful attacker do?
A local attacker could write content to a specific file or registry location with Local System privileges. They could also trigger a recoverable system crash, resulting in an availability impact.
Does this affect an attacker who only has remote network access?
The provided vector identifies the attack vector as local. The data does not indicate that the issue can be exploited directly over the network.
How can I determine whether remediation is available?
Check the Security Update for Armoury Crate App section of the ASUS Security Advisory. The provided information does not identify affected or fixed Armoury Crate versions.