Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteThe headline refers to two ASUS DriverHub vulnerabilities disclosed in May 2025, not a new August 2026 incident. CVE-2025-3462 and CVE-2025-3463 could let malicious web content influence the local DriverHub service and potentially execute code on Windows. ASUS released a fix on April 17, 2025, but its security page later listed CVE-2026-1880 for DriverHub 1.0.6.12 and earlier. If DriverHub is installed, update it through the application or uninstall it if you do not need it.
The short answer
ASUS DriverHub was affected by two serious flaws: an origin-validation error (CVE-2025-3462, CVSS 8.4) and improper certificate validation in its update process (CVE-2025-3463, CVSS 9.4). A vulnerable installation exposed a local HTTP/WebSocket service that could accept requests from attacker-controlled web content. Under the conditions described by the researcher, the update and installer process could be manipulated to run attacker-selected code.
This was not evidence that every ASUS computer had been hacked. Exploitation required vulnerable DriverHub software on the machine and generally depended on the victim loading malicious web content or requests. Initial reporting found no confirmed in-the-wild exploitation. ASUS says the 2025 issues were fixed in an update released April 17, 2025.
There is an important current-status qualification: ASUS’s security-advisory index lists a separate DriverHub issue, CVE-2026-1880, affecting versions 1.0.6.12 and earlier. The 2025 update should therefore not be treated as proof that an installation is fully current.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →#1 Best Overall
- CUTTING-EDGE PERFORMANCE – Experience next-level performance with Windows 11 Home, an Intel Core Ultra 9 Processor 275HX, and an NVIDIA GeForce RTX 5070 Ti Laptop GPU powered by the NVIDIA Blackwell architecture and featuring DLSS 4 and Max-Q technologies.
- HIGH-PERFORMANCE MEMORY AND STORAGE – Multitask seamlessly with 32GB of DDR5-5600MHz memory and store your game library on 1TB of PCIe Gen 4 SSD.
- PREMIUM ROG NEBULA DISPLAY – Immerse yourself in stunning visuals with the ultra-fast 240Hz/3ms display ideal for gaming, creation, and entertainment. Featuring a new ACR film that enhances contrast and reduces glare.
- STATE-OF-THE-ART ROG INTELLIGENT COOLING – ROG’s advanced thermals keep your system cool, quiet and comfortable. State of the art cooling equals best in class performance. Featuring an end-to-end vapor chamber, tri-fan technology and Conductonaut extreme liquid metal applied to the chipset delivers fast gameplay.
- CUSTOMIZABLE FULL-SURROUND RGB LIGHTBAR – Showcase your style with a full-surround RGB light bar that syncs with your keyboard and ROG peripherals. In professional settings, Stealth Mode turns off all lighting for a sleek, refined look.
What ASUS DriverHub does
DriverHub is ASUS software that detects a computer’s hardware—particularly its motherboard—and recommends or installs matching drivers. It communicates with the ASUS DriverHub website and operates largely as a background service rather than only as a conventional desktop application.
Users may encounter it after manually installing a motherboard utility, through an ASUS motherboard or BIOS prompt, or as part of a preinstalled or bundled ASUS software environment. That does not mean every ASUS laptop, desktop or motherboard includes it automatically. The relevant exposure question is whether DriverHub itself is installed and which version it is running.
How the attack worked
The researcher observed DriverHub communicating with a local service on 127.0.0.1, port 53000. A browser page could send HTTP or WebSocket requests to that service. The security boundary was supposed to be enforced by checking the request’s origin, but the check accepted a hostname that merely began with the legitimate ASUS hostname, such as driverhub.asus.com.attacker-controlled-domain.example. The technical disclosure is documented at mrbruh.com.
Rank #2
- Reliable Performance for Everyday Life Handle work, play, and entertainment on Windows 11 with speed and ease, thanks to its Intel Core 7 150U CPU, 16 GB RAM, 1 TB SSD, and fast WiFi 6.
- Clearly Superior Display Enjoy bright, sharp visuals on a slim-bezel NanoEdge display with wide viewing angles and TÜV Rheinland eye-care certification to reduce eye strain.
- Immersive, Balanced Sound Experience clear, rich, and full audio with a system tuned by SonicMaster, delivering wider and deeper sound for movies, music, and games.
- ASUS ErgoSense Keyboard with Numeric Keys Type comfortably with an ErgoSense keyboard designed for optimal key bounce and travel, plus built-in numeric keys for easier data entry during everyday work.
- Charge with Speed Vivobook 17 supports fast charging which allows you to charge a low battery to 60% in as little as 49 minutes, so you can be up and running quicker than ever!
That weakness alone did not mean any internet host could silently take over every ASUS machine. An attacker still needed a vulnerable local DriverHub installation and a way to induce the victim to visit attacker-controlled content. The practical sequence was:
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware match- DriverHub runs its local service with the privileges needed to manage drivers.
- A malicious page sends requests that resemble requests from the ASUS DriverHub site.
- Weak origin validation lets those requests reach DriverHub.
- The update path and its downloaded configuration are influenced.
- The installer processes a silent-install command and may execute attacker-selected code.
Why the installer INI file mattered
The researcher reported that silent installation used a SilentInstallRun entry in an INI file. If an attacker could substitute or influence that file, the installer could be instructed to run a chosen command. Secondary technical accounts describe ASUS’s setup executable being retrieved with a modified SilentInstallRun configuration; see Field Effect and Candid Technology.
The security impact is potential code execution on the Windows computer. The resulting privileges depend on how DriverHub and its installer were running; a “remote code execution” label does not mean an attacker automatically obtained unrestricted control of every ASUS system without user interaction.
Rank #3
- Striking 15.6-inch FHD Display — Brings visuals to life with a 250-nit sustained brightness and 45% NTSC color gamut
- Reliable AMD Ryzen 3 7320U Processor — An efficient processor that delivers reliable performance for multitasking, browsing, and light gaming with 4 cores and 8 threads
- Integrated AMD Radeon Graphics — Enjoy sharp, detailed images and smooth video playback for everyday computing tasks
- Easy Productivity With 8GB Of Memory and 256GB Of Essential Storage — Experience reliable performance for the modern everyday, whether you’re watching movies, shopping or browsing. Save files quickly and store necessary data
- Up To 11 Hours Of Battery Life — With an efficient 42Wh battery 1, minimize charging downtime while maximizing your productivity and relaxation — anytime, anywhere
The two 2025 CVEs
| CVE | Weakness | CVSS | Practical effect |
|---|---|---|---|
| CVE-2025-3462 | Inadequate origin validation | 8.4 (high) | Unauthorized web-originated interaction with the local DriverHub service. |
| CVE-2025-3463 | Improper certificate validation | 9.4 (critical) | Update-path manipulation that could contribute to code execution through the installer. |
The scores and technical descriptions are reported by the researcher at mrbruh.com and in security coverage at The Hacker News. No source cited here reported confirmed exploitation of these specific flaws in the wild at the time of disclosure.
Who was affected?
ASUS’s regional advisory identified DriverHub versions earlier than V6.1.13.0 as affected by CVE-2025-3462 and CVE-2025-3463. That version boundary comes from the advisory at ASUS Latin America; ASUS pages may use different version nomenclature as DriverHub releases change.
The directly affected population was people with a vulnerable DriverHub installation, not everyone who owns ASUS hardware. A researcher also disputed wording in an ASUS CVE description that appeared to limit the issue to motherboards and exclude laptops or desktop computers. The safest practical interpretation is to check for DriverHub on any Windows computer, regardless of its form factor, rather than infer exposure solely from the device category. That broader interpretation is the researcher’s view, not a universal ASUS statement.
Rank #4
- 【Incredible performance】: Equipped with an AMD Ryzen 5 processor and 512GB SSD, this laptop is designed to provide an ultrafast and smooth experience
- 【Fast charging battery】: ASUS fast-charge technology can recharge the battery up to 50% capacity in just 30 minutes, allowing you to quickly top it up without interrupting your workflow
- 【Extra toughness and durability】: This laptop stays cool in all situations thanks to ASUS IceCool thermal technology, and meets US military-grade standards for longevity and sustainability
- 【Effortless typing experience】: The precisely measured and fine-tuned ErgoSense keyboard design reduces strain on your hands and wrists
- 【Smooth video call experience】: AI Noise-Canceling Technology isolates unwanted noise for smooth communications
ASUS’s response and the dates
The dates describe different stages of the response rather than conflicting patch claims.
- April 7, 2025: The researcher says the initial vulnerability was found.
- April 8, 2025: The issue was reported to ASUS after escalation to an RCE scenario.
- April 17, 2025: ASUS says a comprehensive DriverHub update addressing the flaws was released, in its announcement at driverhub.asus.com.
- April 18, 2025: The researcher says ASUS confirmed the fix was live.
- May 9, 2025: ASUS’s advisory listing and the CVE publication appeared.
- May 19, 2025: ASUS posted a public apology and update in the ROG forum.
- April 16, 2026: ASUS published a separate bulletin for CVE-2026-1880; the page was last updated April 30, 2026.
What users should do now
If you want to keep DriverHub
- Open ASUS DriverHub.
- Select Update Now when it is offered.
- Restart or reopen the application if it requests that step, then check again.
- Confirm that the installed release is newer than the vulnerable range in the applicable ASUS advisory.
- Check ASUS’s current security-advisory page for later DriverHub notices, including CVE-2026-1880: https://www.asus.com/security-advisory/.
If the updater fails or you do not need the utility
Uninstall DriverHub through Windows Settings if you do not use its automatic detection. Removing a convenience utility should not normally remove hardware drivers already installed, but ASUS-specific behavior can vary by version and device. Do not remove unrelated chipset, graphics, networking, hotkey or system-control components without checking what they do.
For manual updates, identify the exact computer or motherboard model and use the official ASUS Download Center or Windows Update. Avoid third-party mirrors, lookalike ASUS domains and “one-click driver updater” products.
Recommended Free Tools
Best Value
- Intel Processor Up to 2.80GHz, 4GB DDR4, 128GB Storage
- 15" FHD IPS Display, Intel UHD Graphics
- 1x USB Type C, 1 x USB Type A, 1x Headphone/Microphone Combo Jack, HDMI
- Fast WiFi and Bluetooth, Integrated Webcam
- Chrome OS, AC Charger Included, Pastel Silver
If you suspect compromise
A vulnerable installation is not proof of compromise. If you observed suspicious behavior or have other indicators, run an up-to-date endpoint-security scan, review recent downloads and installed applications, and look for unexpected administrator accounts, scheduled tasks, startup entries or remote-access tools. Change passwords from a known-clean device if malware is suspected. Disconnecting sensitive accounts may be appropriate when there are concrete signs of an incident, not simply because DriverHub was once installed.
Update or uninstall: which is better?
| Choice | Best for | Trade-off |
|---|---|---|
| Update DriverHub | Users who want automatic hardware detection and ASUS-managed recommendations. | A privileged background utility remains installed and must receive future security updates. |
| Uninstall DriverHub | Users who rarely change drivers, prefer manual downloads or want less background software. | You must identify the exact model and select compatible drivers yourself. |
Bundled software and download hygiene
The researcher reported that selecting Install All also installed Armoury Crate, ASUS’s custom CPU-Z, Norton 360 and WinRAR. This is an individual account, not proof that every system or DriverHub release behaves that way; bundling can vary by version and configuration. Review each optional component instead of accepting a bulk installation blindly.
The origin-bypass technique also illustrates why the address bar matters. Download drivers only from ASUS’s genuine domains or Windows Update, and be cautious with search advertisements, typosquatted domains, repacked installers and archived copies of old DriverHub builds.
The later 2026 DriverHub issue
ASUS’s current advisory lists CVE-2026-1880 as affecting DriverHub 1.0.6.12 and earlier. The bulletin was published April 16, 2026 and updated April 30, 2026. ASUS does not present that range as the same version boundary used in the 2025 advisory, so do not merge the two into one universal rule. Check the version installed on your system and follow the newest ASUS guidance.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Why this matters beyond DriverHub
Vendor utilities deserve the same scrutiny as any other privileged software. DriverHub combined elevated driver-management actions, a local web-facing API, browser-origin trust and automatic downloading and execution of installers. A mistake at any one of those boundaries can turn an apparently helpful support tool into an attack path. Keeping only utilities you use, applying their security updates promptly and preferring official download channels reduces that exposure.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
