This vulnerability in ASUS DriverHub is caused by improper protection of critical resources during the update validation phase, specifically an incorrect permission assignment that enables a TOCTOU race condition (CWE-367). A local user with limited privileges can modify these resources between the time they are checked and used, allowing the modified resource to bypass system checks and execute with elevated privileges. The CVSS 4.0 base score is 5.4 (medium), reflecting the need for local access, high attack complexity, and partial user interaction. No known exploits are reported in the wild, and no official patch or remediation level has been disclosed by ASUS as of the publication date.

Successful exploitation allows a local, unprivileged user to escalate privileges on the affected system by modifying update resources that are improperly protected during the ASUS DriverHub update process. This could enable execution of code with elevated privileges, potentially compromising system integrity. However, exploitation requires local access and user interaction, and no active exploits are currently known.

Patch status is not yet confirmed — check the ASUS Security Advisory for current remediation guidance. Until an official fix is released, restrict local user access to systems running ASUS DriverHub and avoid initiating updates from untrusted users. Monitor ASUS communications for updates on patches or official mitigations.