CVE-2022-35899

HIGH 7.8CVE-2022-35899 · Published 21/07/2022 · updated 17/06/2026

In short

CVE-2022-35899 is a HIGH (CVSS 7.8) vulnerability affecting aura ready game software development kit (asus).
Chance of exploitation in the next 30 days (EPSS): 0.90%, higher than 59.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
aura ready game software development kit asus	`= 1.0.0.4`	No fix yet

Description

There is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4. This might allow a local user to escalate privileges by creating a %PROGRAMFILES(X86)%\ASUS\GameSDK.exe file.

References

AngeloPioAmirante/CVE-2022-35899 · Exploit
packetstormsecurity.com/files/167763/Asus-GameSDK-1.0.0.4-Unquoted-Service-Path.html · Exploit
exploit-db.com/exploits/50985 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free