ASUS Driverhub vulnerabilities

3 CVEs affecting ASUS Driverhub, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-1880, published 2026-04-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-3463, published 2025-05-09. Critical severity, CVSS 9.4. EPSS: 0.9% chance of exploitation in the next 30 days. "This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation vulnerability in ASUS DriverHub may allow untrusted sources to…
CVE-2025-3462, published 2025-05-09. High severity, CVSS 8.4. EPSS: 0.5% chance of exploitation in the next 30 days. "This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation in ASUS DriverHub may allow unauthorized sources to interact…
CVE-2026-1880, published 2026-04-16. Medium severity, CVSS 5.4. EPSS: 0.1% chance of exploitation in the next 30 days. An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources…