nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-8917 CVE-2026-8917
HIGH
ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll Untrusted Pointer Dereference Privilege Escalation
Record summary
CVE-2026-8917 has a selected CVSS score of 8.4 (high).
Description
Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the ' Security Update for ASUS GPU Tweak III, GPU Tweak II, AI Suite 3, and Armoury Crate Security Bulletin ' section on the ASUS Security Advisory for more information.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 12, 2026 · Source: CVE List
Affected products and versions
4| Product | Source | Version range | Status |
|---|---|---|---|
AI Suite3Browse ASUS / AI Suite3Default status: unaffected | CVE List | Through V2.1.2.0 | affected |
GPU Tweak IIIBrowse ASUS / GPU Tweak IIIDefault status: unaffected | CVE List | Through V2.1.1.7 | affected |
GPUTweakIIBrowse ASUS / GPUTweakIIDefault status: unaffected | CVE List | Through V2.4.0.0 | affected |
VGAdllBrowse ASUS / VGAdllDefault status: unaffected | CVE List | Through V0.0.7.8 | affected |
References
2asus.com
https://www.asus.com/security-advisory