CVE-2023-26911

—

CVSS 3.1

7.8 high

EPSS

<1%p10

Published

Jul 26, 2023 (Jul 26, 2023)

Modified

Jul 9, 2026

Description

ASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.

Vendors: asus
Products: armoury crate, setupasusservices
Weakness: CWE-428
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.