CVE-2026-93495
Improper initialization in an ASUS certain motherboard allows an physically proximate user to...
Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information.
- Record
CVE-2026-93495- CVSS 4.0
- 7.0 High
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - Weakness
- CWE-665
- Updated
- 2026-11-02
EUVDEUVD-2026-90452
Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information.
- Record
EUVD-2026-90452- CVSS 4.0
- 7.0 High
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-4pjr-762p-4q8c
Improper initialization in an ASUS certain motherboard allows an physically proximate user to...
Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device.
- Record
GHSA-4pjr-762p-4q8c- CVSS 4.0
- 7.0 High
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Weakness
- CWE-665
- Updated
- 2026-11-02
NVD
Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information.
- Record
CVE-2026-93495- CVSS 4.0
- 7.0 High
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Weakness
- CWE-665
- Updated
- 2026-11-02
Affected products
- asus motherboard(prime z390-a )
- asus motherboard(prime z390-a/h10 )
- asus motherboard(pro ws c246-ace )
- asus motherboard(rog maximus xi apex )
- asus motherboard(rog maximus xi code )
- asus motherboard(rog maximus xi extreme )
- asus motherboard(rog maximus xi formula )
- asus motherboard(rog maximus xi gene )
- asus motherboard(rog maximus xi hero (wi-fi) )
- asus motherboard(rog maximus xi hero )
- asus motherboard(rog strix z390-e gaming )
- asus motherboard(rog strix z390-f gaming )
Show 1 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-93495 is a high vulnerability (CVSS 7.0) in Asus Motherboard(prime Z390-a ), published October 1, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.16%, the 5th percentile. No source names a fixed version.