CVE-2026-18023EPSS p0.4%
CVE-2026-18023CVE-2026-18023
Description
Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uninitialized memory via a crafted IOCTL request that bypasses the driver's security verification mechanism.
Refer to the '
Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
Scoring
| EPSS | 0.09% probability of exploitation · percentile 0.4% · 2026-10-06T12:00:23Z |
| Last modified | 2026-09-28 |