CVE-2021-26943: ASUS UX360CA BIOS

High severity, CVSS 8.2. EPSS: 0.9% chance of exploitation in the next 30 days.

The UX360CA BIOS through 303 on ASUS laptops allow an attacker (with the ring 0 privilege) to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM (issue 3 of 3).

Affected products

• ASUS UX360CA BIOS: before 304 (fixed in 304)

Published 2021-03-31. Last modified 2026-06-17.