Local Privilege Escalation in ASUS AI Suite 3 Driver
CVE-2022-4990

7.3HIGH

Key Information:

Vendor

Asus
Status
Ai Suite 3
Vendor
CVE Published:
3 July 2026

What is CVE-2022-4990?

The ASUS AI Suite 3 driver is susceptible to a local privilege escalation vulnerability where improper validation in IOCTL requests can be exploited by local users. This flaw allows unauthorized access to restricted memory blocks, enabling attackers to bypass security mechanisms and potentially gain elevated privileges on the system. Users are advised to review security advisories for mitigation strategies.

Affected Version(s)

AI Suite 3 0

References

https://www.asus.com/security-advisory

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.