CVE-2026-102438
8.5HighPublished 20 Oct 2026 · NVD status: Received · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-427
Impact
Local attackers with low-privilege access can execute arbitrary code with SYSTEM privileges. They need an active local account on the host to drop or modify a DLL.
Root cause
An uncontrolled DLL search path allows a privileged process to load malicious arbitrary libraries.
Affected systems
ASUS Armoury Crate (specific versions not listed — check the vendor advisory).
CVSS v4.0 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Fix & remediation
Upgrade ASUS Armoury Crate through the app update center or the installer from ASUS's advisory; if unable to patch, stop and disable Armoury Crate background services to prevent privileged DLL loading.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process. Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.