ASUS System Control Interface vulnerabilities

5 CVEs affecting ASUS System Control Interface, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-15030, published 2026-07-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-36438, published 2022-10-18. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. AsusSwitch.exe on ASUS personal computers (running Windows) sets weak file permissions, leading to local privilege escalation (this also can be used to delete files within the system arbitrarily).…
CVE-2022-36439, published 2022-10-18. Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days. AsusSoftwareManager.exe in ASUS System Control Interface on ASUS personal computers (running Windows) allows a local user to write into the Temp directory and delete another more privileged file via…
CVE-2026-15029, published 2026-07-15. High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days. Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and…
CVE-2026-13585, published 2026-07-15. High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days. Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a…
CVE-2026-15030, published 2026-07-15. Medium severity, CVSS 5.6. EPSS: 0.1% chance of exploitation in the next 30 days. Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware…