ASUS AURA SYNC driver local privilege escalation
view advisory published 2026-07-21
Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitrary IOCTLs, resulting in privilege escalation.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-25764US | — | — | ||
**UNSUPPORTED WHEN ASSIGNED** Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitr… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- FixedAURA SYNC
ASUS recommends that users check whether a newer version of their installed ASUS software (e.g., Aura Sync, AI Suite 3) is available, and update to the latest version to ensure the affected legacy drivers are no longer in use.
https://www.asus.com/security-advisory
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan