CVE Watch15 jul 2026

CVE-2026-15029

Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local a

CVSS

—

Sin CVSS

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 15 jul 2026 · Última mod.: 15 jul 2026 · CWE-822

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-07-152026-07-16

Descripción técnica

Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and write operations via crafted IOCTL requests to the driver, bypassing OS-enforced memory protections. Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.

Referencias oficiales

www.asus.comhttps://www.asus.com/security-advisory

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-504247.5 ALT

53.5%

——16Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network.2d CVE-2026-585968.3 ALT

36.4%

——11Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.3d CVE-2026-485805.5 MED

36.2%

——11Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.2d CVE-2026-456457.8 ALT

29.4%

——9Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.8d CVE-2026-551385.5 MED

26.7%

——8Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.2d CVE-2026-504797.8 ALT

23.9%

——7Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.3h