CVE-2026-8070: Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s validation mechanism, resulting in unauthorized read and write access to physical memory

Synopsis

Incorrect permission assignment on a critical resource in ASUS Armoury Crate lets a local user bypass the driver's validation logic and gain read/write access to physical memory. Exploitation requires a local low-privileged account on the host and succeeds despite some environmental complexity, granting full control over memory contents that typically leads to privilege escalation and host compromise. No fix version has been published; HarborGuard tracks the ASUS advisory for patch availability.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host running Armoury Crate; no network path is involved.

• AuthenticationRequired

  A local low-privileged account on the affected system is sufficient to invoke the vulnerable driver interface.

• Victim interactionNot required

  No user action is needed once the attacker has local code execution.

• Attack complexityDetail

  Attack complexity is high, indicating the exploit depends on environmental factors such as timing or memory layout to bypass the driver's validation.

Blast Radius

• Reads arbitrary physical memory, exposing kernel structures, credentials, and any secrets resident in RAM.
• Writes arbitrary physical memory, enabling kernel-level tampering and reliable escalation to SYSTEM or equivalent.
• Disrupts or crashes the host by corrupting kernel memory, taking the affected machine offline.