Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vmw6-xgxq-pw9v

Опубликовано: 16 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.4

Описание

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows the altered resource to pass system checks and be executed with elevated privileges upon a user-initiated update. Refer to the 'Security Update for ASUS DriverHub' section on the ASUS Security Advisory for more information.

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows the altered resource to pass system checks and be executed with elevated privileges upon a user-initiated update. Refer to the 'Security Update for ASUS DriverHub' section on the ASUS Security Advisory for more information.

EPSS

Процентиль: 4%
0.00139
Низкий

5.4 Medium

CVSS4

Дефекты

CWE-367

Связанные уязвимости

nvd
4 месяца назад

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows the altered resource to pass system checks and be executed with elevated privileges upon a user-initiated update. Refer to the 'Security Update for ASUS DriverHub' section on the ASUS Security Advisory for more information.

CVSS3: 6.7
fstec
4 месяца назад

Уязвимость инструмента установки и обновления драйверов ASUS DriverHub, связанная с ошибками синхронизации при использовании общего ресурса («Ситуация гонки»), позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 4%
0.00139
Низкий

5.4 Medium

CVSS4

Дефекты

CWE-367