CVE-2022-36438

—

CVSS 3.1

7.8 high

EPSS

<1%p6

Published

Oct 18, 2022 (Oct 18, 2022)

Modified

Jun 17, 2026

Description

AsusSwitch.exe on ASUS personal computers (running Windows) sets weak file permissions, leading to local privilege escalation (this also can be used to delete files within the system arbitrarily). This affects ASUS System Control Interface 3 before 3.1.5.0, and AsusSwitch.exe before 1.0.10.0.

Vendors: asus
Products: asusswitch, system control interface
Weakness: CWE-276
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.