Vulnerability · Published Aug 11, 2026 · Assigned by ASUS
CVE-2026-8917
High 8.4
In plain English
A high-severity security flaw in AI Suite3 from ASUS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 4% of all known vulnerabilities).
Official description
Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the ' Security Update for ASUS GPU Tweak III, GPU Tweak II, AI Suite 3, and Armoury Crate Security Bulletin ' section on the ASUS Security Advisory for more information.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ASUS | GPU Tweak III | through V2.1.1.7 |
| ASUS | GPUTweakII | through V2.4.0.0 |
| ASUS | AI Suite3 | through V2.1.2.0 |
| ASUS | VGAdll | through V0.0.7.8 |
Weakness: CWE-822 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N