What’s Vulnerable › Vulnerabilities

CVE-2026-8917

• Severity: high (CVSS 8.4 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-11 · updated 2026-09-17
• Weakness: CWE-822

Description

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the '  Security Update for ASUS GPU Tweak III, GPU Tweak II, AI Suite 3, and Armoury Crate Security Bulletin   ' section on the ASUS Security Advisory for more information.

Affected products

• ASUS AI Suite3: through V2.1.2.0
• ASUS GPU Tweak III: through V2.1.1.7
• ASUS GPUTweakII: through V2.4.0.0
• ASUS VGAdll: through V0.0.7.8

References

• https://www.asus.com/security-advisory

Get alerted when CVE-2026-8917 or the next vulnerability affects your stack