CVE-2026-8070: High severity ASUS Armoury Crate App vulnerability
Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s validation mechanism, resulting in unauthorized read and write access to physical memory.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8070?
The severity of CVE-2026-8070 is rated high with a CVSS score of 7.3.
What is the impact of CVE-2026-8070?
CVE-2026-8070 allows a local user to bypass the driver's validation mechanism, leading to unauthorized read and write access to physical memory.
How do I fix CVE-2026-8070?
To fix CVE-2026-8070, users should apply the security update provided by ASUS for the Armoury Crate App.
Who is affected by CVE-2026-8070?
CVE-2026-8070 affects users of the ASUS Armoury Crate App due to improper permission assignment.
When was CVE-2026-8070 published?
CVE-2026-8070 was published on May 29, 2026.