CVE-2026-13585

Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a local administrator to disclose sensitive information via crafted IOCTL requests, which, in severe cases, may lead to a Denial of Service (DoS) on the system. Refer to the '  Security Update for ASUS System Control Interface  ' section on the ASUS Security Advisory for more information.

Affected products

Asus Business Manager, Asus System Control Interface

Fix

Available

CVSS 4.0

8.2 HIGH

EPSS

0.2% (6th percentile)

Weakness

CWE-226, CWE-770

NVD status

Deferred

Published

2026-07-15