High-severity security flaw found in ASUS Armoury Crate — update now

Full text

Asus Armoury Crate is not my favourite bit of software. It looks all high-tech on the surface, but any time I use it for more than five minutes, I'm reminded of the fact it's rather messy. It's also hit the headlines previously for patched security vulnerability issues—and good news, folks, here we go again.

Per the Asus security advisory board , Armoury Crate, Asus GPU Tweak III, and GPU Tweak II should all be updated to ensure "optimal protection," after the discovery of a new security vulnerability.

Listed as CVE-2026-8917 , the issue has been given a score of 8.4 out of 10, with a "high" severity rating. Which is, funnily enough, the exact same rating as the previous issue we wrote about last year. "An IOCTLY vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation," says the posting.

Well, that sounds like something that should be patched up at the earliest possible moment. The CVE listing doesn't mention Armoury Crate specifically, but the Asus page mentions that "a component used" by the software is part of the update, so time to get installing.

GPU Tweak III , II, and AI Suite 3 will need the latest versions installing from their respective support pages, whereas Armoury Crate can be updated from within the app itself.

(Image credit: Asus) As an aside, Asus isn't the only company that patches out security vulnerabilities for its software on a regular basis, so if you've got something hanging around in your system tray from another hardware provider (particularly system/mobo software that came with your machine), it's a good idea to check for updates on a regular basis.

It's a dangerous world out there, and new security holes are patched all the time. Get thee to the update menu, and keep your ear to the ground.