CVE-2026-16003
LowCVSS 2.0Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
An exposed IOCTL with insufficient access control in the Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request, bypassing the driver's verification. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.
Risk Assessment
Risk of local privilege escalation or security bypass, potentially allowing an attacker to manipulate driver behavior and compromise system integrity.
Recommendation
Apply the security update provided by ASUS for the Armoury Crate app and restrict local access to the system.
Other vulnerabilities in Armoury Crate
See all- CVE-2026-8070High
A vulnerability in Armoury Crate software stems from incorrect permission assignment for a critical resource. A local user can bypass the driver's validation mechanism, gaining unauthorized read and write access to physical memory.
- CVE-2025-9968High
A link following vulnerability exists in the UnifyScanner component of Armoury Crate. It may be triggered by creating a specially crafted junction, potentially leading to local privilege escalation.
Original NVD description (English source)
Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request by bypassing the driver's verification.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS