ASUS ASUS System Control Interface vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting ASUS ASUS System Control Interface: 5 record(s), with affected versions and fixes.
CVE-2026-15030
Medium · 5.6
CWE-125 Jul 14, 2026
Out-of-bounds Read in Asus System Control Interface v3
Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request that bypasses the validation.
Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
CVE-2026-15029
High · 8.4
CWE-822 Jul 14, 2026
Untrusted Pointer Dereference in Asus System Control Interface v3
Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and write operations via crafted IOCTL requests to the driver, bypassing OS-enforced memory protections.
Refer to the '
Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
CVE-2026-13585
High · 8.2
CWE-226 Jul 14, 2026
Allocation of Resources Without Limits and Throttling and Sensitive Information in…
Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a local administrator to disclose sensitive information via crafted IOCTL requests, which, in severe cases, may lead to a Denial of Service (DoS) on the system.
Refer to the '
Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
CVE-2026-7480
High · 7.3
CWE-732 May 28, 2026
Incorrect Permission Assignment for Critical Resource in ASUS ASUS System Control Interface
An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute arbitrary code via a crafted RPC call that bypass the validation mechanism.
Refer to the 'Security Update for ASUS System Control Interface' section on the ASUS Security Advisory for more information.
CVE-2026-3508
Medium · 6.8
CWE-125 May 8, 2026
Out-of-bounds Read in ASUS ASUS System Control Interface
An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows a local user to cause system crash (BSOD) via a read size that exceeds the buffer size.Refer to the '
Security Update for MyASUS ' section on the ASUS Security Advisory for more information.