CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 4:00 PM ET)

What this means for you

This week: 3,234 CVEs published, 239 critical, and 5 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,234; Show in the list
Critical, last 7 days: 239; Show in the list
Healthcare-tagged, last 7 days: 6; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product asus:armoury_crate. Show all products

19 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2026-102438	High 8.5	An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is lat… Assigned by ASUS	Oct 19, 2026
CVE-2026-12962	Medium 5.3	A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted web page that sends… Assigned by ASUS	Sep 7, 2026
CVE-2026-18023	Medium 5.7	Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uninitialized memory via a crafted IOCTL request tha… Assigned by ASUS	Sep 7, 2026
CVE-2026-16003	Low 2.0	Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request by bypassing th… Assigned by ASUS	Sep 7, 2026
CVE-2026-16004	Medium 5.9	Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by bypassing the driver'… Assigned by ASUS	Sep 7, 2026
CVE-2026-16005	Medium 5.8	Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the driver's verification, which can corrupt data… Assigned by ASUS	Sep 7, 2026
CVE-2026-16006	Medium 5.7	Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL request by bypassing the… Assigned by ASUS	Sep 7, 2026
CVE-2026-75808	Medium 5.7	Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-service condition through system memory exhaustion by bypassing driver authenticati… Assigned by ASUS	Sep 7, 2026
CVE-2026-75809	Medium 5.9	Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCT… Assigned by ASUS	Sep 7, 2026
CVE-2026-75810	Medium 5.7	Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interr… Assigned by ASUS	Sep 7, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.