Vulnerability · Published Oct 27, 2026 · Assigned by ASUS
CVE-2026-88781
Medium 6.8
In plain English
A medium-severity security flaw in motherboards firmware from ASUS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).
Official description
Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing a system crash. Refer to the 'Security Update for Multiple ASUS Motherboards' section on the ASUS Security Advisory for more information.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ASUS | motherboards firmware | A520/B550 series Before 3644 4304X570 Series Before 5054A620/A620A Series Before 4003 4004B650 Series Before 1303 4003 4004X670 Series Before 4003 4004B840 Series Before 1804B850 Series Before 1103 1804 2503X870 Series Before 1804 2503 |
Weakness: CWE-822 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N