Sensitive Information Disclosure in ASUS Armoury Crate Driver

CVE-2026-18023

What is CVE-2026-18023?

A vulnerability in the ASUS Armoury Crate driver enables local users to potentially access sensitive information stored in uninitialized memory. By crafting a specific IOCTL request that evades the driver’s security checks, attackers may expose confidential data. For comprehensive details, refer to the Security Update for Armoury Crate App section on the ASUS Security Advisory page.

References