Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing a system crash.
Refer to the 'Security Update for Multiple ASUS Motherboards' section on the ASUS Security Advisory for more information.

Attack Vector Local

Attack Complexity Low

Privileges Required High

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
ASUS motherboards firmware unaffected
Version Status Constraints
A520/B550 series Before 3644 4304 affected —
X570 Series Before 5054 affected —
A620/A620A Series Before 4003 4004 affected —
B650 Series Before 1303 4003 4004 affected —
X670 Series Before 4003 4004 affected —
B840 Series Before 1804 affected —
B850 Series Before 1103 1804 2503 affected —
X870 Series Before 1804 2503 affected —
X870E Series Before 1103 2503 affected —
Knoll Series Before 4003 affected —
TRX50 Series Before 0703 1403 affected —
W790 Series Before 2101 affected —
WRX90 Series Before 1403 affected —

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Asus Subscribe
Motherboards Firmware Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://www.asus.com/security-advisory cve-icon cve-icon
History

Tue, 27 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
Description Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing a system crash. Refer to the 'Security Update for Multiple ASUS Motherboards' section on the ASUS Security Advisory for more information.
First Time appeared Asus
Asus motherboards Firmware
Weaknesses CWE-822
CPEs cpe:2.3:a:asus:motherboards_firmware:a520_b550_series_before_3644_4304:*:*:*:*:*:*:*
cpe:2.3:a:asus:motherboards_firmware:a620_a620a_series_before_4003_4004:*:*:*:*:*:*:*
cpe:2.3:a:asus:motherboards_firmware:b650_series_before_1303_4003_4004:*:*:*:*:*:*:*
cpe:2.3:a:asus:motherboards_firmware:b840_series_before_1804:*:*:*:*:*:*:*
cpe:2.3:a:asus:motherboards_firmware:b850_series_before_1103_1804_2503:*:*:*:*:*:*:*
cpe:2.3:a:asus:motherboards_firmware:knoll_series_before_4003:*:*:*:*:*:*:*
cpe:2.3:a:asus:motherboards_firmware:trx50_series_before_0703_1403:*:*:*:*:*:*:*
cpe:2.3:a:asus:motherboards_firmware:w790_series_before_2101:*:*:*:*:*:*:*
cpe:2.3:a:asus:motherboards_firmware:wrx90_series_before_1403:*:*:*:*:*:*:*
cpe:2.3:a:asus:motherboards_firmware:x570_series_before_5054:*:*:*:*:*:*:*
cpe:2.3:a:asus:motherboards_firmware:x670_series_before_4003_4004:*:*:*:*:*:*:*
cpe:2.3:a:asus:motherboards_firmware:x870_series_before_1804_2503:*:*:*:*:*:*:*
cpe:2.3:a:asus:motherboards_firmware:x870e_series_before_1103_2503:*:*:*:*:*:*:*
Vendors & Products Asus
Asus motherboards Firmware
References
Metrics cvssV4_0

{'score': 6.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: ASUS

Published:

Updated: 2026-10-27T02:01:00.588Z

Reserved: 2026-09-10T07:20:16.919Z

Link: CVE-2026-88781

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-27T03:16:26.663

Modified: 2026-10-27T03:16:26.663

Link: CVE-2026-88781

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses