Live › vulnerability › CVE-2026-110464
ASUS Armoury Crate has a missing authorization check in a service's inter-process interface. A local attacker can write content to a specific file or registry location with Local System privileges, or crash the system in a recoverable way.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-04 02:46 UTC. All times on this page are UTC.
Machines running ASUS Armoury Crate with its local service exposed on the inter-process interface. The attacker needs local access to the machine, such as a logged-in user or malware already running there. unknown for whether other configurations are affected.
No product ranges from the sources yet.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local System privileges, or to cause a recoverable system crash, via the service's exposed inter-process interface. Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
This page as .md · .json · in your agent: get_signal("CVE-2026-110464")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.