Back to Database
Status published
High
CVE-2025-9968
A link following vulnerability exists in the UnifyScanner component of...
Vulnerability Description
A link following vulnerability exists in the UnifyScanner component of Armoury Crate. This vulnerability may be triggered by creating a specially crafted junction, potentially leading to local privilege escalation. For more information, please refer to section 'Security Update for Armoury Crate App' in the ASUS Security Advisory.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-9968
Credits & Attribution
No credits recorded in the NVD database.
References
More from ASUS
View All →CVE-2025-9338
A improper restriction of operations within the bounds of a...
High
7.3
CVE-2025-9337
A null pointer dereference has been identified in the AsIO3.sys...
Medium
6.8
CVE-2025-9336
A stack buffer overflow has been identified in the AsIO3.sys...
Medium
6.8
CVE-2025-6398
A null pointer dereference vulnerability exists in the IOMap64.sys driver...
Medium
6.7
CVE-2025-59374
"UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client...
Critical
9.3
Affected Vendor
ASUS
View all reports →Affected Software
Armoury Crate
Vulnerable Versions:
before 6.3.4
Timeline
Official Publish:
October 13th, 2025
Last Modified:
February 26th, 2026
Added to House:
July 22nd, 2026