CVE-2022-4990
High
Description
** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows a local user to bypass security validation and access restricted memory blocks via crafted IOCTL requests, leading to privilege escalation. Refer to the 'End-of-Life Notice and Driver Update for Legacy ASUS Drivers ' section on the ASUS Security Advisory for more information.
SeverityHigh
CVSS7.3
Exploit probability—
ProductAI Suite 3
PublishedJul 3, 2026
First seenJul 3, 2026
Weakness typeCWE-1284CWE-1284
How to fix
Update
- ASUS AI Suite 3v3.03.00 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ASUS AI Suite 3 | v < v3.03.00 | v3.03.00 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.