CVE-2021-40981: ASUS Armoury Crate Lite Service

High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days.

ASUS ROG Armoury Crate Lite before 4.2.10 allows local users to gain privileges by placing a Trojan horse file in the publicly writable %PROGRAMDATA%\ASUS\GamingCenterLib directory.

Affected products

• ASUS Armoury Crate Lite Service: before 4.2.10 (fixed in 4.2.10)

Published 2021-09-27. Last modified 2026-06-17.