Uncontrolled Search Path Element Vulnerability in ASUS Armoury Crate
CVE-2026-102438

8.5HIGH

Key Information:

Vendor

Asus
Status
Armoury Crate
Armoury Crate Se
Vendor
CVE Published:
20 October 2026

What is CVE-2026-102438?

The vulnerability present in ASUS Armoury Crate enables local users to exploit an uncontrolled search path element flaw to execute arbitrary code. This occurs through the manipulation of a dynamic-link library (DLL) that is subsequently loaded by a high-privilege process. Users should refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for comprehensive mitigation measures.

Affected Version(s)

Armoury Crate V3.0.0.

Armoury Crate SE V2.1.17

References

https://www.asus.com/security-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.