Vulnerability · Published Oct 13, 2025 · Assigned by ASUS
CVE-2025-9968
High 8.5
In plain English
A high-severity security flaw in Armoury Crate from ASUS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Severity (CVSS 4.0)8.5High
Exploit odds (30 days)0.2%top 90.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A link following vulnerability exists in the UnifyScanner component of Armoury Crate. This vulnerability may be triggered by creating a specially crafted junction, potentially leading to local privilege escalation. For more information, please refer to section 'Security Update for Armoury Crate App' in the ASUS Security Advisory.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ASUS | Armoury Crate | before 6.3.4 |
Weakness: CWE-59 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
- https://www.asus.com/security-advisory/ vendor-advisory