Exploited Vulnerabilities DailyCVE-2025-59374: ASUS Live Update
EPSS1.1%No. 1657 of 1739 in KEV
CVE year2025listed the same year
Same vendor in KEV3
Same product1
| Field | Value |
|---|---|
| Vendor | ASUS |
| Product | Live Update |
| Name | ASUS Live Update Embedded Malicious Code Vulnerability |
| Added to KEV | 2025-12-17 |
| US federal due date | 2026-01-07 |
| Ransomware use | Unknown |
| CWE | CWE-506 |
CISA description
ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A ASUS Live Update vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2025-12-17.