CVE-2026-3428
Gravedad CVSS v4.0:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
16/04/2026
Última modificación:
16/04/2026
Descripción
*** Pendiente de traducción *** A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center(华硕大厅) allows a local user to achieve privilege escalation to Administrator via exploitation of a Time-of-check Time-of-use (TOC-TOU) during the update process, where an unexpected payload is substituted for a legitimate one immediately after download, and subsequently executed with administrative privileges upon user consent.<br />
Refer to the &#39;Security Update for ASUS Member Center&#39; section on the ASUS Security Advisory for more information.
Impacto
Puntuación base 4.0
5.40
Gravedad 4.0
MEDIA