CoreCVE
Back

HIGH

An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute arbitrary code via a crafted RPC call that bypass the validation mechanism

Published May 29, 2026

Description

An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute arbitrary code via a crafted RPC call that bypass the validation mechanism. Refer to the 'Security Update for ASUS System Control Interface' section on the ASUS Security Advisory for more information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner ASUS
Published May 29, 2026
Updated May 29, 2026
Reserved Apr 30, 2026
Link CVE-2026-7480

CISA Vulnrichment

Updated May 29, 2026

NVD

Status Awaiting Analysis
Modified Jul 21, 2026
Link CVE-2026-7480

Red Hat

No data

ENISA EUVD

Assigner ASUS
Published May 29, 2026
Updated May 29, 2026
Link EUVD-2026-33245

GitHub

No data