CVE-2026-15029CWE-822

CVE-2026-15029

published July 15, 2026

CVSS
8.4
EPSS
0%
Percentile
6.0
In the wild
Unconfirmed
What it is

Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and write operations via crafted IOCTL requests to the driver, bypassing OS-enforced memory protections.

Refer to the '

Security Update for ASUS System Control Interface  ' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS
8.4 · NONE
CVSS v4.0
Not supplied
EPSS
0.00170 · 6.0th percentile
Weakness
CWE-822 · Untrusted Pointer Dereference
Published
2026-07-15T06:18Z
References (1)
https://www.asus.com/security-advisory · 54bf65a7-a193-42d2-b1ba-8e150d3c35e1
EPSS history
Timeline
  • 15 JUL 02:01Z
    Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to…
    cvelistv5