CVE-2022-44898: ASUS Aura Sync

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The MsIo64.sys component in Asus Aura Sync through v1.07.79 does not properly validate input to IOCTL 0x80102040, 0x80102044, 0x80102050, and 0x80102054, allowing attackers to trigger a memory corruption and cause a Denial of Service (DoS) or escalate privileges via crafted IOCTL requests.

Affected products

• ASUS Aura Sync: up to and including 1.07.79

Published 2022-12-14. Last modified 2026-06-17.