CVE-2026-102438: Armoury Crate V3.0.0. through V6.5.10; +1 more affected products

Affected technology

Armoury Crate · V3.0.0. through V6.5.10
ASUS

Armoury Crate SE · V2.1.17 through V2.2.17
ASUS

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

Local users can execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process. Source advisory’s CVSS 4.0 assessment (base score 8.5/10) rates confidentiality, integrity and availability impact as high.