CVE-2026-16727
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
A race condition vulnerability in ASUS Armoury Crate. A local user can exploit concurrent execution with improper synchronization to execute arbitrary code with elevated privileges via file replacement.
Risk Assessment
An attacker with local access can gain elevated privileges and execute arbitrary code, potentially leading to full system compromise.
Recommendation
Apply the security update for ASUS Armoury Crate as per the vendor's advisory.
Other vulnerabilities in ASUS Armoury Crate
See all- CVE-2026-8918High
ASUS Armoury Crate has a vulnerability related to a permissive list of allowed inputs, allowing a local administrator to perform arbitrary memory read/write operations or cause a system crash (BSOD) by bypassing the validation mechanism.
- CVE-2023-26911High
A vulnerability in ASUS SetupAsusServices v1.0.5.1 within Asus Armoury Crate v5.3.4.0 is caused by an unquoted service path, allowing local users to launch processes with elevated privileges.
Original NVD description (English source)
Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated privileges via a crafted file replacement. Refer to the ' Security Update for ASUS Armoury Crate ' section on the ASUS Security Advisory for more information.