CVE-2025-59374 ASUS Live Update
ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. The impacted product could be…
- CVSS
- not scored
On CISA’s exploited list
ASUS Live Update Embedded Malicious Code Vulnerability
- Added
- 2025-12-17
- Federal patch deadline
- 2026-01-07
- Ransomware use
- not known