CVE-2026-13585CWE-226CWE-770denial-of-service

CVE-2026-13585

published July 15, 2026

CVSS
8.2
EPSS
0%
Percentile
5.2
In the wild
Unconfirmed
What it is

Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a local administrator to disclose sensitive information via crafted IOCTL requests, which, in severe cases, may lead to a Denial of Service (DoS) on the system.

Refer to the '

Security Update for ASUS System Control Interface  ' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS
8.2 · NONE
CVSS v4.0
Not supplied
EPSS
0.00163 · 5.2th percentile
Weaknesses
CWE-226 · Sensitive Information in Resource Not Removed Before Reuse; CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-07-15T06:18Z
References (2)
https://www.asus.com/security-advisory/ · 54bf65a7-a193-42d2-b1ba-8e150d3c35e1http://seclists.org/fulldisclosure/2026/Jul/26 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 15 JUL 02:01Z
    Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface…
    cvelistv5