CVE-2026-8917
Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the ' Security Update for ASUS GPU Tweak III, GPU Tweak II, AI Suite 3, and Armoury Crate Security Bulletin ' section on the ASUS Security Advisory for more information.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.4
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.11%
- CWE
- CWE-822
- Published
- 2026-08-11
- Last modified
- 2026-08-12
Affected products
- ASUS GPU Tweak III
- ASUS GPUTweakII
- ASUS AI Suite3
- ASUS VGAdll
Weakness type
Related vulnerabilities
- CVE-2026-83498 — Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
- CVE-2026-83939 — Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- CVE-2026-78451 — Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
- CVE-2026-78444 — Microsoft Failover Cluster Remote Code Execution Vulnerability
- CVE-2026-72938 — Microsoft Office PowerPoint Information Disclosure Vulnerability
- CVE-2026-72956 — Microsoft Office PowerPoint Information Disclosure Vulnerability
- CVE-2026-69874 — Windows ALPC Elevation of Privilege Vulnerability
- CVE-2026-69900 — Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability