Vulnerability · Published Mar 12, 2026 · Assigned by ASUS
CVE-2026-1878
Medium 5.4
In plain English
A medium-severity security flaw in Driver( Headset ) from ASUS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).
Official description
An Insufficient Integrity Verification vulnerability in the ASUS ROG peripheral driver installation process allows privilege escalation to SYSTEM. The vulnerability is due to improper access control on the installation directory, which enables the exploitation of a race condition where the legitimate installer is substituted with an unexpected payload immediately after download, resulting in arbitrary code execution. Refer to the "Security Update for ASUS ROG peripheral driver" section on the ASUS Security Advisory for more information.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ASUS | Driver( Keyboard & Mouse ) | before 1.0.66.0 |
| ASUS | Driver( Headset ) | before 1.0.12.0 |
Weakness: CWE-494 · Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N