Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-1880

DriverHub · privilege escalation

CVSS 4.0 5.4 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-1880

Published

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows the altered resource to pass system checks and be executed with elevated privileges upon a user-initiated update. Refer to the 'Security Update for ASUS DriverHub' section on the ASUS Security Advisory for more information.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-1880

Published

DriverHub

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "ASUS",
                    "product": "DriverHub",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "before 1.0.6.12",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON