CVE-2026-8070 PUBLISHED

Assigner: ASUS
Reserved: 07.05.2026 Published: 29.05.2026 Updated: 29.05.2026

Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s validation mechanism, resulting in unauthorized read and write access to physical memory.Refer to the '  Security Update for Armoury Crate App   ' section on the ASUS Security Advisory for more information.

Metrics

CVSS Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS Score: 7.3

Product Status

Vendor ASUS
Product Armoury Crate
Versions Default: unaffected
  • affected from 0 to 6.4.12 (incl.)

Credits

  • jakub buczak finder

References

Problem Types

  • CWE-732 Incorrect Permission Assignment for Critical Resource CWE