VULNERABILITY INTELLIGENCE
CVE-2026-13585
EPSS probability0.16%
CISA KEVNot currently listed
Published2026-07-15
Last modified2026-09-17
Description
Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a local administrator to disclose sensitive information via crafted IOCTL requests, which, in severe cases, may lead to a Denial of Service (DoS) on the system. Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
Weakness classification
- 54bf65a7-a193-42d2-b1ba-8e150d3c35e1: CWE-226