Improper Permission Assignment in Armoury Crate by ASUS
CVE-2026-8070

7.3HIGH

Key Information:

Vendor

Asus

Vendor
CVE Published:
29 May 2026

What is CVE-2026-8070?

An improper permission assignment vulnerability in the Armoury Crate application developed by ASUS enables a local user to bypass necessary validation checks within the driver. This can lead to unauthorized access to critical resources, posing a significant risk of unauthorized read and write operations to physical memory. For more detailed information, refer to the ASUS Security Advisory.

Affected Version(s)

Armoury Crate through 6.4.12

References

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

jakub buczak
.