CVE-2026-102438

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process. Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.

Score

CVSS 4.0 8.5 High

Status

Awaiting Analysis - 54bf65a7-a193-42d2-b1ba-8e150d3c35e1

Published

2026-10-20

Last modified

2026-10-21

Weaknesses

CWE-427

Affected products

• Armoury Crate (Asus)
• Armoury Crate Se (Asus)

References

• https://www.asus.com/security-advisory