CVE-2026-93495 PUBLISHED

Assigner: ASUS
Reserved: 18.09.2026 Published: 01.10.2026 Updated: 01.10.2026

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device.

Metrics

CVSS Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS Score: 7

Product Status

Vendor ASUS
Product Motherboard(PRIME Z390-A )
Versions Default: unaffected
  • Version through 2101 is affected
Vendor ASUS
Product Motherboard(PRIME Z390-A/H10 )
Versions Default: unaffected
  • Version through 2101 is affected
Vendor ASUS
Product Motherboard(ROG MAXIMUS XI HERO )
Versions Default: unaffected
  • Version through 2101 is affected
Vendor ASUS
Product Motherboard(ROG MAXIMUS XI HERO (WI-FI) )
Versions Default: unaffected
  • Version through 2101 is affected
Vendor ASUS
Product Motherboard(ROG MAXIMUS XI FORMULA )
Versions Default: unaffected
  • Version through 2101 is affected
Vendor ASUS
Product Motherboard(ROG MAXIMUS XI CODE )
Versions Default: unaffected
  • Version through 2101 is affected
Vendor ASUS
Product Motherboard(ROG MAXIMUS XI EXTREME )
Versions Default: unaffected
  • Version through 2101 is affected
Vendor ASUS
Product Motherboard(ROG MAXIMUS XI APEX )
Versions Default: unaffected
  • Version through 2101 is affected
Vendor ASUS
Product Motherboard(ROG MAXIMUS XI GENE )
Versions Default: unaffected
  • Version through 2101 is affected
Vendor ASUS
Product Motherboard(ROG STRIX Z390-E GAMING )
Versions Default: unaffected
  • Version through 2101 is affected
Vendor ASUS
Product Motherboard(ROG STRIX Z390-F GAMING )
Versions Default: unaffected
  • Version through 2101 is affected
Vendor ASUS
Product Motherboard(Pro WS C246-ACE )
Versions Default: unaffected
  • Version through 2101 is affected
Vendor ASUS
Product Motherboard(WS Z390 PRO )
Versions Default: unaffected
  • Version through 1401 is affected

References

Problem Types

  • CWE-665：Improper Initialization CWE