CVE-2025-9968
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
A link following vulnerability exists in the UnifyScanner component of Armoury Crate. It may be triggered by creating a specially crafted junction, potentially leading to local privilege escalation.
Risk Assessment
An attacker with local access can exploit this vulnerability to escalate privileges, gaining access to resources reserved for administrators. This may lead to full compromise of the workstation.
Recommendation
Apply the ASUS security update for Armoury Crate as described in the 'Security Update for Armoury Crate App' section of the ASUS Security Advisory. Restrict local access to trusted users.
Other vulnerabilities in Armoury Crate
See all- CVE-2026-16003Low
An exposed IOCTL with insufficient access control in the Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request, bypassing the driver's verification. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.
- CVE-2026-8070High
A vulnerability in Armoury Crate software stems from incorrect permission assignment for a critical resource. A local user can bypass the driver's validation mechanism, gaining unauthorized read and write access to physical memory.
Original NVD description (English source)
A link following vulnerability exists in the UnifyScanner component of Armoury Crate. This vulnerability may be triggered by creating a specially crafted junction, potentially leading to local privilege escalation. For more information, please refer to section 'Security Update for Armoury Crate App' in the ASUS Security Advisory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS