CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-12-17
ASUS Live Update Client Supply Chain Compromise and Malicious Code Insertion Vulnerability (CVE-2025-59374) Advisory
[Affected Scope] Specific versions of the ASUS Live Update client distributed prior to its End-of-Support (EOS) in October 2021
[Impact] Unauthorized modifications introduced via a supply chain compromise allow remote code execution and unintended malicious actions on targeted devices
[Mitigation] Since the product is End-of-Support, immediately uninstall the software and block update server communications at the network level