CVE-2026-16727

State
Published
Severity
7.3 High
Published
Jul 30, 2026
Updated
Jul 31, 2026
Reserved
Jul 23, 2026

Read the record on cve.org

Description

Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated privileges via a crafted file replacement. Refer to the ' Security Update for ASUS Armoury Crate ' section on the ASUS Security Advisory for more information.

Scores

CVSSScoreVectorSource
4.07.3 HighCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NASUS

Weaknesses

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (‘Race Condition’)

Affected Products

ProductVersions
Armoury CrateASUS
  • V5.4.1 through V6.4.12Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.