{"id":"CVE-2026-88781","title":"Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing …","summary":"Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing …","severity":"medium","cvss":6.8,"cvssVector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","cvssSource":"cna","cwe":["CWE-822"],"vendor":"ASUS","product":"motherboards firmware","affected":["motherboards_firmware A520/B550 series Before 3644 4304","motherboards_firmware X570 Series Before 5054","motherboards_firmware A620/A620A Series Before 4003 4004","motherboards_firmware B650 Series Before 1303 4003 4004","motherboards_firmware X670 Series Before 4003 4004","motherboards_firmware B840 Series Before 1804","motherboards_firmware B850 Series Before 1103 1804 2503","motherboards_firmware X870 Series Before 1804 2503","motherboards_firmware X870E Series \tBefore 1103 2503","motherboards_firmware Knoll Series Before 4003","motherboards_firmware TRX50 Series Before 0703 1403","motherboards_firmware W790 Series Before 2101","motherboards_firmware WRX90 Series Before 1403"],"published":"2026-10-27","updated":"2026-10-27","sourceUpdated":"2026-10-27T02:01:00.588Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-88781","references":[{"url":"https://www.asus.com/security-advisory"}],"tags":["cve.org"],"epss":0.00112,"epssPercentile":0.01353,"ingestedAt":"2026-10-27T16:11:59.206Z","slug":"CVE-2026-88781","body":"## Overview\n\nUntrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing a system crash.\nRefer to the 'Security Update for Multiple ASUS Motherboards' section on the ASUS Security Advisory for more information.\n\n## Affected\n\n- `motherboards_firmware A520/B550 series Before 3644 4304`\n- `motherboards_firmware X570 Series Before 5054`\n- `motherboards_firmware A620/A620A Series Before 4003 4004`\n- `motherboards_firmware B650 Series Before 1303 4003 4004`\n- `motherboards_firmware X670 Series Before 4003 4004`\n- `motherboards_firmware B840 Series Before 1804`\n- `motherboards_firmware B850 Series Before 1103 1804 2503`\n- `motherboards_firmware X870 Series Before 1804 2503`\n- `motherboards_firmware X870E Series \tBefore 1103 2503`\n- `motherboards_firmware Knoll Series Before 4003`\n- `motherboards_firmware TRX50 Series Before 0703 1403`\n- `motherboards_firmware W790 Series Before 2101`\n- `motherboards_firmware WRX90 Series Before 1403`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":37.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}