CVE-2026-88781

State: Published
Severity: 6.8 Medium
Published: Oct 27, 2026
Updated: Oct 27, 2026
Reserved: Sep 10, 2026

Description

Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing a system crash. Refer to the 'Security Update for Multiple ASUS Motherboards' section on the ASUS Security Advisory for more information.

Scores

CVSS	Score	Vector	Source
4.0	6.8 Medium	CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N	ASUS

Weaknesses

CWE-822 ：Untrusted Pointer Dereference

Affected Products

Product	Versions
motherboards firmwareASUS	A520/B550 series Before 3644 4304Affected X570 Series Before 5054Affected A620/A620A Series Before 4003 4004Affected B650 Series Before 1303 4003 4004Affected X670 Series Before 4003 4004Affected B840 Series Before 1804Affected B850 Series Before 1103 1804 2503Affected X870 Series Before 1804 2503Affected X870E Series Before 1103 2503Affected Knoll Series Before 4003Affected TRX50 Series Before 0703 1403Affected W790 Series Before 2101Affected WRX90 Series Before 1403Affected

Product

Versions

motherboards firmwareASUS

A520/B550 series Before 3644 4304Affected
X570 Series Before 5054Affected
A620/A620A Series Before 4003 4004Affected
B650 Series Before 1303 4003 4004Affected
X670 Series Before 4003 4004Affected
B840 Series Before 1804Affected
B850 Series Before 1103 1804 2503Affected
X870 Series Before 1804 2503Affected
X870E Series Before 1103 2503Affected
Knoll Series Before 4003Affected
TRX50 Series Before 0703 1403Affected
W790 Series Before 2101Affected
WRX90 Series Before 1403Affected

References

https://www.asus.com/security-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.