CVE-2026-88781
Medium
Description
Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing a system crash. Refer to the 'Security Update for Multiple ASUS Motherboards' section on the ASUS Security Advisory for more information.
SeverityMedium
CVSS6.8
Exploit probability—
ProductAsus Motherboards Firmware
PublishedOct 27, 2026
First seenOct 27, 2026
Weakness typeCWE-822CWE-822
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ASUS motherboards firmware | A520/B550 series Before 3644 4304, X570 Series Before 5054, A620/A620A Series Before 4003 4004, B650 Series Before 1303 4003 4004, X670 Series Before 4003 4004, B840 Series Before 1804, B850 Series Before 1103 1804 2503, X870 Series Before 1804 2503, X870E Series Before 1103 2503, Knoll Series Before 4003, TRX50 Series Before 0703 1403, W790 Series Before 2101, WRX90 Series Before 1403 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.