{"id":"CVE-2026-102438","title":"An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process.…","summary":"An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process.…","severity":"high","cvss":8.5,"cvssVector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","cvssSource":"cna","cwe":["CWE-427"],"vendor":"ASUS","product":"Armoury Crate","affected":["armoury_crate >= V3.0.0. <= V6.5.10","armoury_crate_se >= V2.1.17 <= V2.2.17"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-20T19:16:44.804905Z"},"published":"2026-10-20","updated":"2026-10-21","sourceUpdated":"2026-10-21T03:56:15.397Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102438","references":[{"url":"https://www.asus.com/security-advisory"}],"tags":["cve.org"],"epss":0.00124,"epssPercentile":0.01944,"ingestedAt":"2026-10-20T02:51:19.464Z","slug":"CVE-2026-102438","body":"## Overview\n\nAn uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process.\nRefer to the '\nSecurity Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.\n\n## Affected\n\n- `armoury_crate >= V3.0.0. <= V6.5.10`\n- `armoury_crate_se >= V2.1.17 <= V2.2.17`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":46.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}