ASUS System Control Interface vulnerabilities

2 CVEs affecting ASUS System Control Interface, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-7480, published 2026-05-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-3508, published 2026-05-08. Medium severity, CVSS 6.8. EPSS: 0.1% chance of exploitation in the next 30 days. An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows a local user to cause system crash (BSOD) via a read size that exceeds the buffer size.Refer to the…
CVE-2026-7480, published 2026-05-29. High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days. An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute arbitrary code via a crafted…