CVE-2026-8918CWE-183

CVE-2026-8918

published June 22, 2026

CVSS
7.1
EPSS
0%
Percentile
19.3
In the wild
Unconfirmed
What it is

A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or cause a system crash (BSOD) by bypassing the validation mechanism.Refer to the '

Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS
7.1 · NONE
CVSS v4.0
Not supplied
EPSS
0.00279 · 19.3th percentile
Weakness
CWE-183 · Permissive List of Allowed Inputs
Published
2026-06-22T07:16Z
References (1)
https://www.asus.com/security-advisory · 54bf65a7-a193-42d2-b1ba-8e150d3c35e1
EPSS history
Timeline
  • 22 JUN 02:00Z
    A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or cause a system…
    cvelistv5