CVE-2019-25764

**UNSUPPORTED WHEN ASSIGNED**  Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitrary IOCTLs, resulting in privilege escalation. Refer to the 'End-of-Life Notice and Driver Update for Legacy ASUS Drivers ' section on the ASUS Security Advisory for more information.

Score

CVSS 4.0 7.3 High

Status

Deferred - 54bf65a7-a193-42d2-b1ba-8e150d3c35e1

Published

2026-07-17

Last modified

2026-07-17

Weaknesses

CWE-782

Affected products

• Aura Sync (Asus)

References

• https://www.asus.com/security-advisory