CVE-2026-13585

Description

Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a local administrator to disclose sensitive information via crafted IOCTL requests, which, in severe cases, may lead to a Denial of Service (DoS) on the system. Refer to the '  Security Update for ASUS System Control Interface  ' section on the ASUS Security Advisory for more information.

Traduire en français

Produits concernés

• ASUS System Control Interface v3
• ASUS System Control Interface
• ASUS Business Manager

Scores CVSS

Faiblesses (CWE)

• CWE-226
• CWE-770

Références

• https://www.asus.com/security-advisory/
• http://seclists.org/fulldisclosure/2026/Jul/26

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories