Live › vulnerability › CVE-2026-102438
Go to dashboardASUS Armoury Crate loads a dynamic-link library from an uncontrolled search path, and a high-privilege process later loads it. A local user who plants a replacement DLL can run arbitrary code with SYSTEM privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Windows machines with ASUS Armoury Crate installed are exposed, and the flaw needs a local user account on that machine. Systems without Armoury Crate, or where only trusted administrators can log in, carry lower risk. The sources do not list affected version ranges.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process. Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
This page as .md · .json · in your agent: get_signal("CVE-2026-102438")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.