CVE-2026-8918
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
ASUS Armoury Crate has a vulnerability related to a permissive list of allowed inputs, allowing a local administrator to perform arbitrary memory read/write operations or cause a system crash (BSOD) by bypassing the validation mechanism.
Risk Assessment
This vulnerability could lead to serious security issues, including unauthorized access to system memory and system instability.
Recommendation
It is recommended to update the Armoury Crate application to the latest version to patch this vulnerability and restrict administrator access to trusted users.
Other vulnerabilities in ASUS Armoury Crate
See all- CVE-2026-16727High
A race condition vulnerability in ASUS Armoury Crate. A local user can exploit concurrent execution with improper synchronization to execute arbitrary code with elevated privileges via file replacement.
- CVE-2023-26911High
A vulnerability in ASUS SetupAsusServices v1.0.5.1 within Asus Armoury Crate v5.3.4.0 is caused by an unquoted service path, allowing local users to launch processes with elevated privileges.
Original NVD description (English source)
A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or cause a system crash (BSOD) by bypassing the validation mechanism.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.