CVE-2026-8918: High severity ASUS Armoury Crate vulnerability
A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or cause a system crash (BSOD) by bypassing the validation mechanism.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8918?
CVE-2026-8918 has a high severity score of 7.1 according to the CVSS system.
How do I fix CVE-2026-8918?
To fix CVE-2026-8918, apply the latest security update for ASUS Armoury Crate as recommended in the ASUS Security Advisory.
What are the potential impacts of CVE-2026-8918?
CVE-2026-8918 could allow a local administrator to perform arbitrary memory read/write operations or cause a system crash (BSOD).
Who is affected by CVE-2026-8918?
CVE-2026-8918 affects users of the ASUS Armoury Crate application on their systems.
What type of vulnerability is CVE-2026-8918?
CVE-2026-8918 is a local privilege escalation vulnerability that allows unauthorized memory operations.