CVE-2026-13585

Katalog CVE

CVSS 8.2 · High EPSS 0,16%

Kerentanan Sensitive Information in Resource Not Removed Before Reuse. Skor CVSS 4.0 8.2 (High) menurut CNA.

Deskripsi (NVD)

Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a local administrator to disclose sensitive information via crafted IOCTL requests, which, in severe cases, may lead to a Denial of Service (DoS) on the system. Refer to the '  Security Update for ASUS System Control Interface  ' section on the ASUS Security Advisory for more information.

Rincian

Terbit di NVD

15 Juli 2026

Terakhir diubah

17 September 2026

Status NVD

Deferred

CVSS 4.0

8.2 (High), sumber CNA
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:H/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-226: Sensitive Information in Resource Not Removed Before Reuse
CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 5,0% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://www.asus.com/security-advisory/
• http://seclists.org/fulldisclosure/2026/Jul/26