CVE-2025-3464

EIP tracks 1 public exploit for CVE-2025-3464. PoCs published by jeffaf.

AI-analyzed exploit summary This is a functional local privilege escalation (LPE) exploit for CVE-2025-3464 targeting AsIO3.sys. It combines a hardlink TOCTOU bypass with a PreviousMode exploitation technique to achieve NT AUTHORITY\SYSTEM privileges.

A race condition vulnerability exists in Armoury Crate. This vulnerability arises from a Time-of-check Time-of-use issue, potentially leading to authentication bypass. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.