CVE-2026-75810: CWE-749: Exposed Dangerous Method or Function in ASUS Armoury Crate

The vulnerability identified as CVE-2026-75810 in ASUS Armoury Crate involves an exposed dangerous method or function that permits a local user to bypass driver authentication. By exploiting this, the attacker can send requests to trigger system management interrupts (SMIs). Triggering SMIs causes a brief system stall, and repeated exploitation can result in a denial-of-service condition. The CVSS 4.0 base score is 5.7, reflecting a medium severity with local attack vector, high attack complexity, and requiring low privileges but no user interaction. No known exploits in the wild or patch information are currently available.

A local attacker can cause temporary system stalls and potentially a denial-of-service condition by bypassing driver authentication and triggering system management interrupts repeatedly. This impacts system availability but does not indicate privilege escalation or data compromise based on the provided information.

Patch status is not yet confirmed — check the ASUS Security Advisory for current remediation guidance. No official fix or workaround details are provided in the available data.