Skip to content
Asus vulnerabilities
Products
Show 160 moreShow less
Newest
-
asus router firmware
Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to...
CVE-2026-84729
7.2 High
-
asus router firmware
Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby...
CVE-2026-84730
8.7 High
-
asus system control interface
An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local...
CVE-2026-112116
8.5 High
-
asus armoury crate
Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a...
CVE-2026-110464
6.9 Medium
-
asus motherboards firmware
Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level...
CVE-2026-88781
6.8 Medium
-
asus router
Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows...
CVE-2026-75775
7.7 High
-
asus router
Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an...
CVE-2026-93489
Public exploit
8.7 High
-
asus router
Improper Neutralization of Special
Elements used in an OS Command (“OS Command Injection”) and...
CVE-2026-75779
8.6 High
-
asus router
Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized...
CVE-2026-75753
5.3 Medium
-
asus router
Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent...
CVE-2026-17518
8.2 High
-
asus armoury crate, armoury crate se +1 more
An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to...
CVE-2026-102438
8.5 High
-
@tanstack react-start, solid-start, start-server-core +2 more +4 more
TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses
CVE-2026-102989
Fix available
9.3 Critical
-
asus router
Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS...
CVE-2026-14911
9.3 Critical
-
asus router
A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token...
CVE-2026-19396
7.7 High
-
asus router
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to...
CVE-2026-19386
9.3 Critical
-
asus router
Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote...
CVE-2026-16528
8.4 High
-
asus router
An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated...
CVE-2026-13313
8.9 High
-
asus router
Use of an Externally Controlled Format String in the ASUS Router modules allow a remote...
CVE-2026-14157
9.4 Critical
-
asus motherboard(prime z390-a ), motherboard(prime z390-a/h10 ), motherboard(pro ws c246-ace ) +10 more +12 more
Improper initialization in an ASUS certain motherboard allows an physically proximate user to...
CVE-2026-93495
7.0 High
-
@angular router, angular +1 more
Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)
CVE-2026-101896
Fix available
8.2 High
-
asus control center express agent
Missing authentication for a critical function in ASUS Control Center Express Agent allows an...
CVE-2026-19397
7.7 High
-
asus armoury crate
A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote...
CVE-2026-12962
5.3 Medium
-
asus armoury crate
Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a...
CVE-2026-18023
5.7 Medium
-
asus armoury crate
Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add...
CVE-2026-16003
2.0 Low
-
asus armoury crate
Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to...
CVE-2026-16004
5.9 Medium
-
asus armoury crate
Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free...
CVE-2026-16005
5.8 Medium
-
asus armoury crate
Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate...
CVE-2026-16006
5.7 Medium
-
asus armoury crate
Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to...
CVE-2026-75808
5.7 Medium
-
asus armoury crate
Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to...
CVE-2026-75809
5.9 Medium
-
asus armoury crate
Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief...
CVE-2026-75810
5.7 Medium
-
asus armoury crate
Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a...
CVE-2026-75811
5.8 Medium
-
asus control center enterprise (acc)
Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard...
CVE-2026-75754
10.0 Critical
-
asus fa507nu, fa507nv +1 more
“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU...
CVE-2026-19398
6.8 Medium
-
asus router
TRENDnet Router ping.cgi command injection
CVE-2026-75985
5.3 Medium
-
asus ai suite3, gpu tweak iii, gputweakii +1 more +3 more
Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL...
CVE-2026-8917
8.4 High
-
asus armoury crate
Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in...
CVE-2026-16727
7.3 High
-
asus aura sync
**UNSUPPORTED WHEN ASSIGNED** Exposed IOCTL with Insufficient Access Control in the ASUS AURA...
CVE-2019-25764
7.3 High
-
asus router
An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain...
CVE-2026-13385
9.5 Critical
-
asus business manager, system control interface, system control interface v3 +1 more +3 more
Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface,...
CVE-2026-15029
8.4 High
-
asus business manager, system control interface, system control interface v3 +1 more +3 more
Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS...
CVE-2026-15030
5.6 Medium
-
asus business manager, system control interface, business manager manager +1 more +3 more
Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not...
CVE-2026-13585
Public exploit
8.2 High
-
asus aura wallpaper service
Improper Restriction of Communication Channel to Intended Endpoints and External Control of File...
CVE-2026-8920
8.5 High
-
asus gamesdk
Permissive Cross-domain Security Policy with Untrusted Domains in ASUS GameSDK allows a remote...
CVE-2026-8919
7.2 High
-
asus router
Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web...
CVE-2026-11851
5.9 Medium
-
asus ai suite 3
** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI...
CVE-2022-4989
8.5 High
-
asus ai suite 3
** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI...
CVE-2022-4990
7.3 High
-
asus business manager
External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user...
CVE-2026-8921
8.5 High
-
asus router app
An Improper Export of Android Application Components vulnerability in ASUS Router App allows a...
CVE-2026-12960
Public exploit
6.0 Medium
-
asus armoury crate
A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform...
CVE-2026-8918
7.1 High
-
asus system control interface
An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control...
CVE-2026-7480
7.3 High
- Show olderLoading…