Update Asus' Armoury Crate Now to Patch a Major Vulnerability

Gamers with Asus devices need to update their systems ASAP: A recently disclosed vulnerability in Armoury Crate allows hackers to gain low-level system privileges, potentially compromising your OS.

How the Armoury Crate bug works

Armoury Crate is an Asus utility—often preinstalled—that manages Asus and ROG software and peripherals. This vulnerability, tracked as CVE-2025-3464, allows threat actors to skirt authentication requirements and obtain SYSTEM privileges on Windows machines. As Tech Radar reports, the flaw in the Armoury Crate kernel-mode driver verifies calls using a hardcoded SHA-256 hash of AsusCertServices.exe and a PID allowlist rather than OS-level access checks.

If exploited, the bug would permit driver access, which could result in full OS takeover. That said, attackers must already be on your system—the result of malware, phishing, or stolen credentials—to take advantage.

CVE-2025-3464 was reported by a researcher at Cisco Talos and is considered high severity (with a score of 8.4 out of 10).

This isn't the first security issue Asus has faced in recent months. The company patched a remote code execution vulnerability in DriverHub in May and has also been a target for threat actors spreading malware. A campaign known as CoffeeLoader—identified earlier this year—impersonated Armoury Crate to deliver infostealers to user systems.

Update Armoury Crate to the latest version

While Asus says there's no indication that the vulnerability has been exploited in the wild, users should still update to the latest version of Armoury Crate. The flaw affects all versions between 5.9.9.0 and 6.1.18.0.

To download and install updates, open the Armoury Crate app and navigate to Settings > Update Center > Check for Updates > Update.