Critical Vulnerability Found in ASUS Armoury Crate Software

Inkl

Critical Vulnerability Found in ASUS Armoury Crate Software

First seen 12 Aug 2026, 23:33 UTC • •72.0

Article Content

1 / 8

Browse articles

ThreatCluster •August 13, 2026 at 23:13 UTC

•CVE-2026-8917 has a high severity score of 8.4, indicating critical risk.
•The vulnerability affects ASUS Armoury Crate and related software used in gaming devices.
•ASUS has released security updates and recommends immediate action from users.

A severe vulnerability (CVE-2026-8917) has been identified in ASUS Armoury Crate software, with a CVSS score of 8.4. This vulnerability allows local attackers to escalate privileges by exploiting an IOCTL interface, potentially leading to unauthorized access to sensitive memory locations. Affected systems include ASUS gaming laptops, desktops, and handheld devices. ASUS released an advisory on August 10, 2026, urging users to update their software immediately. Security updates have also been issued for related software, including GPU Tweak III, GPU Tweak II, and AI Suite 3. Users are advised to check for updates and apply them promptly to mitigate risks. The vulnerability poses a significant threat due to its potential for exploitation by local attackers.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 57d ago How this analysis works

Timeline

2026-08-10

ASUS publishes security advisory

ASUS warns users about a critical vulnerability in Armoury Crate and recommends updates.

2026-08-11

CVE-2026-8917 published

The vulnerability is officially documented, allowing local attackers to escalate privileges.

2026-08-12

Security updates released for affected software

ASUS releases updates for GPU Tweak III, GPU Tweak II, and AI Suite 3 to address vulnerabilities.

2026-08-13

Users urged to update software immediately

ASUS emphasizes the importance of applying updates to mitigate the risk of exploitation.

More articles in this cluster (7)

Threat Graph

7 entities, 6 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Malware
Privilege Escalation
T1068 - Exploitation for Privilege Escalation

Organization (1)

Asus

Vulnerability (1)

CVE-2026-8917

Weakness (1)

CWE-269 - Improper Privilege Management

Affected Platform (1)

Xbox

Relationships

CVE-2026-8917 targets Xbox
Malware targets Xbox
Privilege Escalation targets Xbox
T1068 - Exploitation for Privilege Escalation targets Xbox
CVE-2026-8917 related to Asus
CVE-2026-8917 related to CWE-269 - Improper Privilege Management

Following this threat?

Track Asus and CVE-2026-8917 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…