CVE-2025-15038

An Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL  request, potentially leading to a disclosure of kernel information or a system crash. Refer to the "Security Update for ASUS  Business System Control Interface" section on the ASUS Security Advisory for more information.

• CWE-125

• https://www.asus.com/content/security-advisory

Published

Mar 12, 2026

Last Modified

Jun 17, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15032Missing about:blank indicator in custom-sized new windows in…7.4
• CVE-2025-15033A vulnerability in WooCommerce 8.1 to 10.4.2 can allow logge…6.5
• CVE-2025-15034A security flaw has been discovered in itsourcecode Student …9.8
• CVE-2025-15035Improper Input Validation vulnerability in TP-Link Archer AX…7.3
• CVE-2025-15036A path traversal vulnerability exists in the `extract_archiv…10
• CVE-2025-15037An Incorrect Permission Assignment vulnerability exists in t…6.8
• CVE-2025-15039The Conditional Authentication (Adaptive Authentication) scr…9.4
• CVE-2025-1504The Post Lockdown plugin for WordPress is vulnerable to Info…6.5
• CVE-2025-15041The BackWPup – WordPress Backup & Restore Plugin plugin for …7.2
• CVE-2025-15043The The Events Calendar plugin for WordPress is vulnerable t…5.4
• CVE-2025-15044A vulnerability was detected in Tenda WH450 1.0.0.18. Impact…9.8
• CVE-2025-15045A flaw has been found in Tenda WH450 1.0.0.18. The affected …9.8