Live › vulnerability › CVE-2026-112116
ASUS System Control Interface exposes a device control request (IOCTL) without enough access control. A local user with low privileges can read and write arbitrary physical memory, which can lead to full control of the system.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-04 02:46 UTC. All times on this page are UTC.
Machines running ASUS System Control Interface, typically ASUS consumer PCs with that driver installed. Exposure requires a local account on the machine; remote attackers without a local foothold are not described as affected. Machines without the component can skip it.
No product ranges from the sources yet.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted device control requests, ultimately resulting in a complete compromise of the affected system. Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
This page as .md · .json · in your agent: get_signal("CVE-2026-112116")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.