CVE-2026-75810: CWE-749: Exposed Dangerous Method or Function in ASUS Armoury Crate

This vulnerability (CVE-2026-75810) in ASUS Armoury Crate involves an exposed dangerous method or function that permits a local user with low privileges to bypass driver authentication. By sending crafted requests, the attacker can trigger system management interrupts (SMIs), causing brief system stalls. Repeated exploitation can result in a denial-of-service condition. The vulnerability affects versions through 6.5.7. No known exploits in the wild have been reported. The CVSS 4.0 vector indicates local attack vector, high attack complexity, no user interaction, and high impact on availability.

A local attacker with low privileges can cause brief system stalls by bypassing driver authentication and triggering SMIs. Repeated triggering can lead to denial-of-service, impacting system availability. There is no indication of privilege escalation, confidentiality, or integrity impact. No known active exploitation has been reported.

No patch or official fix information is provided in the advisory. Patch status is not yet confirmed — check the ASUS Security Advisory for current remediation guidance. Until a fix is available, limit local user access and monitor for unusual system stalls related to Armoury Crate usage.