Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to a disclosure of kernel information or a system crash. Refer to the "Security Update for ASUS Business System Control Interface" section on the ASUS Security Advisory for more information.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-12 | 2 | Disclosure2 |
| 2026-03-18 | 1 | Disclosure1 |
Two more kernel-mode CVEs: CVE-2025-15037, CVE-2025-15038 (ASUS Business System Control Interface) 😉 https://www.asus.com/security-advisory https://t.co/mjvuq28vDT
Post summary
The tweet announces two new kernel‑mode CVEs (CVE‑2025‑15037 and CVE‑2025‑15038) pertaining to the ASUS Business System Control Interface, with a link to the detailed security advisory.
⚡ New CVE Alert: CVE-2025-15038 📊 Severity: 6.9 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-15038 #CVE-2025-15038 #CVE #Medium #CyberSecurity #InfoSec https://t.co/DaYOoT6wNx
Post summary
Tweet announces CVE-2025-15038 with a medium severity rating (6.9), listing affected products as multiple/unidentified, and links to the NVD entry.
CVE-2025-15038 An Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user se… https://www.cve.org/CVERecord?id=CVE-2025-15038
Post summary
A vulnerability (CVE-2025-15038) is disclosed as an out-of-bounds read in an ASUS driver that can be triggered by an unprivileged local user.