CVE-2026-15030CWE-125

CVE-2026-15030

published July 15, 2026

CVSS
5.6
EPSS
0%
Percentile
2.8
In the wild
Unconfirmed
What it is

Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request that bypasses the validation.

Refer to the ' Security Update for ASUS System Control Interface  ' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS
5.6 · NONE
CVSS v4.0
Not supplied
EPSS
0.00137 · 2.8th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-07-15T06:18Z
References (1)
https://www.asus.com/security-advisory · 54bf65a7-a193-42d2-b1ba-8e150d3c35e1
EPSS history
Timeline
  • 15 JUL 02:01Z
    Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory…
    cvelistv5