CVE-2019-25764CWE-782

CVE-2019-25764

published July 17, 2026

CVSS
7.3
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

**UNSUPPORTED WHEN ASSIGNED**  Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitrary IOCTLs, resulting in privilege escalation.

Refer to the 'End-of-Life Notice and Driver Update for Legacy ASUS Drivers ' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS
7.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00122 · 1.9th percentile
Weakness
CWE-782 · Exposed IOCTL with Insufficient Access Control
Published
2026-07-17T11:16Z
References (1)
EPSS history
Timeline
  • 17 JUL 06:00Z
    **UNSUPPORTED WHEN ASSIGNED**  Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's…
    cvelistv5