CVE-2026-88781
Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system inform
ASUS motherboards firmware
CVSS
6.8MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing a system crash. Refer to the 'Security Update for Multiple ASUS Motherboards' section on the ASUS Security Advisory for more information.
Text from CVE List
Affected versions 13
- motherboards firmwareaffected: A520/B550 series Before 3644 4304CVE List
- motherboards firmwareaffected: X570 Series Before 5054CVE List
- motherboards firmwareaffected: A620/A620A Series Before 4003 4004CVE List
- motherboards firmwareaffected: B650 Series Before 1303 4003 4004CVE List
- motherboards firmwareaffected: X670 Series Before 4003 4004CVE List
- motherboards firmwareaffected: B840 Series Before 1804CVE List
- motherboards firmwareaffected: B850 Series Before 1103 1804 2503CVE List
- motherboards firmwareaffected: X870 Series Before 1804 2503CVE List
- motherboards firmwareaffected: X870E Series Before 1103 2503CVE List
- motherboards firmwareaffected: Knoll Series Before 4003CVE List
- motherboards firmwareaffected: TRX50 Series Before 0703 1403CVE List
- motherboards firmwareaffected: W790 Series Before 2101CVE List
- motherboards firmwareaffected: WRX90 Series Before 1403CVE List