CVE-2022-36439: ASUS Asusliveupdate

Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days.

AsusSoftwareManager.exe in ASUS System Control Interface on ASUS personal computers (running Windows) allows a local user to write into the Temp directory and delete another more privileged file via SYSTEM privileges. This affects ASUS System Control Interface 3 before 3.1.5.0, AsusSoftwareManger.exe before 1.0.53.0, and AsusLiveUpdate.dll before 1.0.45.0.

Affected products

• ASUS Asusliveupdate: before 1.0.45.0 (fixed in 1.0.45.0)
• ASUS Asussoftwaremanger: before 1.0.53.0 (fixed in 1.0.53.0)
• ASUS System Control Interface: from 3.0.0.0, before 3.1.5.0 (fixed in 3.1.5.0)

Published 2022-10-18. Last modified 2026-06-17.