Asus Software Manager Agent Uncontrolled DLL Loading Path Vulnerability Allowing Arbitrary Code Execution

Vulnerability

A vulnerability allowing uncontrolled DLL loading has been identified in Asus Software Manager Agent. This issue could enable a local attacker to manipulate the application into loading a DLL from a location controlled by the attacker, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability could result in arbitrary code execution on the affected system.

Remediation

Users can refer to the 'Security Update for MyASUS' section on the ASUS Security Advisory for guidance on addressing this vulnerability.

Added: Jan 6, 2026, 3:16 AM
Updated: Jan 6, 2026, 3:16 AM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
10.0
exploitability
3.3
remediation
0.0
relevance
1.9
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.