CVE-2026-13585 – ASUS System Control Interface and Business Manager Information Disclosure and Denial of Service

CVE ID :CVE-2026-13585

Published : July 15, 2026, 2:18 a.m. | 1 hour, 13 minutes ago

Description :Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a local administrator to disclose sensitive information via crafted IOCTL requests, which, in severe cases, may lead to a Denial of Service (DoS) on the system.
Refer to the ‘ 
Security Update for ASUS System Control Interface  ‘ section on the ASUS Security Advisory for more information.

Severity: 8.2 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…