What’s Vulnerable › Vulnerabilities

CVE-2025-3464

• Severity: high (CVSS 8.4 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-16 · updated 2026-06-17
• Weakness: CWE-367

Description

A race condition vulnerability exists in Armoury Crate. This vulnerability arises from a Time-of-check Time-of-use issue, potentially leading to authentication bypass. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.

Affected products

• ASUS Armoury Crate: v5.9.9.0~v6.1.18

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2150
• https://www.asus.com/content/asus-product-security-advisory/
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2150

Get alerted when CVE-2025-3464 or the next vulnerability affects your stack