AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

ASUS security advisories

34 advisories · 19 critical or high in 12 months · latest Oct 27

Advisories page

34 advisories

Medium 6.8Oct 27ASUS motherboards firmware: untrusted pointer dereferenceCVE-2026-88781no fix yetHigh 7.7Oct 23ASUS Router: command injectionCVE-2026-75775no fix yetHigh 8.6Oct 23ASUS Router: command injectionCVE-2026-75779no fix yetHigh 8.7Oct 23ASUS Router: improper authenticationCVE-2026-93489no fix yetHigh 7.0Oct 1Improper initialization in an ASUS certain motherboardCVE-2026-93495no fix yetHigh 8.9Oct 1ASUS Router: debug code left activeCVE-2026-13313no fix yetCritical 9.4Oct 1ASUS Router: remote code executionCVE-2026-14157no fix yetMedium 5.8Sep 8ASUS Armoury Crate: local user could modify hardware configuration settingsCVE-2026-75811no fix yetMedium 5.7Sep 8ASUS Armoury Crate: information disclosureCVE-2026-18023no fix yetHigh 7.7Sep 8ASUS Control Center Express Agent: missing authenticationCVE-2026-19397no fix yetMedium 5.7Sep 8ASUS Armoury Crate: denial of serviceCVE-2026-75808no fix yetMedium 5.9Sep 8ASUS Armoury Crate: improper access controlCVE-2026-75809no fix yetMedium 5.7Sep 8ASUS Armoury Crate: denial of serviceCVE-2026-75810no fix yetMedium 5.3Sep 8ASUS Armoury Crate: remote user could obtain a local user's NTLM hashCVE-2026-12962no fix yetLow 2.0Sep 8ASUS Armoury Crate: improper access controlCVE-2026-16003no fix yetMedium 5.9Sep 8ASUS Armoury Crate: improper access controlCVE-2026-16004no fix yetMedium 5.8Sep 8ASUS Armoury Crate: local user could free arbitrary memoryCVE-2026-16005no fix yetMedium 5.7Sep 8ASUS Armoury Crate: system information exposureCVE-2026-16006no fix yetCritical 10.0Sep 4ASUS Control Center Enterprise (ACC): missing authenticationCVE-2026-75754no fix yetMedium 6.8Aug 27ASUS FA507NU: out-of-bounds writeCVE-2026-19398no fix yetHigh 8.4Aug 11ASUS AI Suite3: privilege escalationCVE-2026-8917no fix yetHigh 7.3Jul 30ASUS Armoury Crate: race conditionCVE-2026-16727no fix yetHigh 7.3Jul 17ASUS AURA SYNC: improper access controlCVE-2019-25764fixed in 1.07.84High 7.2Jul 15ASUS GameSDK: information disclosureCVE-2026-8919no fix yetHigh 8.5Jul 15ASUS Aura Wallpaper Service: local user could perform file operationsCVE-2026-8920no fix yetHigh 8.4Jul 15ASUS Business Manager: untrusted pointer dereferenceCVE-2026-15029no fix yetMedium 5.6Jul 15ASUS Business Manager: out-of-bounds readCVE-2026-15030no fix yetCritical 9.5Jul 15ASUS Router: improper certificate validationCVE-2026-13385no fix yetHigh 8.2Jul 15ASUS Business Manager: information disclosureCVE-2026-13585no fix yetMedium 5.9Jul 15ASUS Router: SQL injectionCVE-2026-11851no fix yetHigh 7.3Jul 3ASUS AI Suite 3: privilege escalationCVE-2022-4990fixed in v3.03.00Medium 6.0Jul 3ASUS Router app: exported componentCVE-2026-12960no fix yetHigh 8.5Jul 3ASUS Business Manager: code executionCVE-2026-8921no fix yetHigh 8.5Jul 3ASUS AI Suite 3: privilege escalationCVE-2022-4989fixed in v3.03.00
About ASUS

Security advisories ASUS publishes for its own products.

www.asus.com/content/asus-product-security-advisoryASUS

ASUS elsewhere on Ibis: Paydays