VYPR

Armoury Crate

by Asus

CVEs (23)

  • CVE-2026-12962MedSep 8, 2026
    risk 0.34cvss —epss 0.00

    A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted web page that sends a request containing a UNC path to the application's local service…

  • CVE-2025-11775MedDec 17, 2025
    risk 0.31cvss —epss 0.00

    An out-of-bounds read vulnerability has been identified in the asComSvc service. This vulnerability can be triggered by sending specially crafted requests, which may lead to a service crash or partial loss of functionality. This vulnerability only affects ASUS motherboard series…

  • CVE-2026-16727HigJul 30, 2026
    risk 0.00cvss —epss 0.00

    Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated privileges via a crafted file replacement. Refer to the ' Security Update for ASUS Armoury Crate '…

Page 2 of 2