Authorization Flaw in ASUS Armoury Crate Allows Local System Privilege Escalation

CVE-2026-110464

What is CVE-2026-110464?

A missing authorization vulnerability in ASUS Armoury Crate enables a local attacker to leverage the service's exposed inter-process interface. This flaw permits the attacker to write content into sensitive files or registry locations with Local System privileges, potentially leading to system instability or crashes. Users are advised to consult the ASUS Security Advisory for updates and remediation strategies.

References