CVE-2026-16003

LowCVSS 2.0

Published: 08/09/2026(UTC)Translated: 08/09/2026(UTC)NVD NIST

Summary

An exposed IOCTL with insufficient access control in the Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request, bypassing the driver's verification. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.

Risk Assessment

Risk of local privilege escalation or security bypass, potentially allowing an attacker to manipulate driver behavior and compromise system integrity.

Recommendation

Apply the security update provided by ASUS for the Armoury Crate app and restrict local access to the system.

Other vulnerabilities in Armoury Crate

CVE-2026-8070High
A vulnerability in Armoury Crate software stems from incorrect permission assignment for a critical resource. A local user can bypass the driver's validation mechanism, gaining unauthorized read and write access to physical memory.

Original NVD description (English source)

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request by bypassing the driver's verification.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.