CVE-2026-88781

Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing a system crash. Refer to the 'Security Update for Multiple ASUS Motherboards' section on the ASUS Security Advisory for more information.

CVSS 4.0

6.8CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-822

Published

2026-10-27

Modified

2026-10-27

Record from

the NVD, synced 2026-10-27

References

• https://www.asus.com/security-advisory

Check your stackJSON