Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.9

ASUS Armoury Crate lets local user modify system files

CVE-2026-110464 · published 1 day ago
Summary

The Armoury Crate application on ASUS PCs allows any program running on the computer to write to a protected system file or registry entry, gaining full system privileges, or to trigger a controlled crash. This could let an attacker install malicious software or disrupt the machine’s operation. Install the latest ASUS update for Armoury Crate to close the unauthorized access.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
asus armoury crate <= v6.5.14
Original advisory text
Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local System privileges, or to cause a recoverable system crash, ...
Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local System privileges, or to cause a recoverable system crash, via the service's exposed inter-process interface.
Refer to the '
Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.9 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-862Missing Authorization
Timeline
Published4 Nov 2026
Updated4 Nov 2026
First seen4 Nov 2026
Sources
CVE-2026-110464 · NVD
CVE-2026-110464 · MITRE
Track software like this
Free during beta