Is CVE-2025-59374 exploited in the wild?

Yes. CVE-2025-59374 is known to be exploited in the wild, first recorded on 17 December 2025. Treat it as urgent.

How severe is CVE-2025-59374?

Critical severity, with a CVSS score of 9.8, published 17 December 2025.

Which products and versions are affected?

ASUS Live Update Versions prior to 3.6.8.

Is there a fix for CVE-2025-59374?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-59374 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2025-59374?

Check whether you run ASUS Live Update at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-59374: ASUS Live Update supply chain compromise and embedded malicious code

CVE-2025-59374 · Severity: critical · CVSS 9.8 · Exploited in the wild · Published 2025-12-17

ASUS Live Update, a utility used to automatically update drivers and firmware on ASUS computers, was compromised in a supply chain attack. Attackers distributed modified versions of the software containing malicious code, allowing them to take control of targeted devices. Because this software reached its end-of-life in 2021, users still running the application should discontinue its use immediately to prevent potential unauthorized access or data loss.

Vendors: ASUS.

Quick answers

Is CVE-2025-59374 exploited in the wild?: Yes. CVE-2025-59374 is known to be exploited in the wild, first recorded on 17 December 2025. Treat it as urgent.
How severe is CVE-2025-59374?: Critical severity, with a CVSS score of 9.8, published 17 December 2025.
Which products and versions are affected?: ASUS Live Update Versions prior to 3.6.8.
Is there a fix for CVE-2025-59374?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-59374 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2025-59374?: Check whether you run ASUS Live Update at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is classified as CWE-506 (Embedded Malicious Code) resulting from a supply chain compromise of the ASUS Live Update utility. Unauthorized modifications were introduced into the software builds, which were then distributed to end-users through official channels. When executed, the modified client performs unintended actions on devices that meet specific targeting criteria. The vulnerability has been exploited in the wild. As the product reached End-of-Support (EOS) in October 2021, no official patch is available for the legacy client; users are advised to uninstall the software. Versions prior to 3.6.8 are identified as vulnerable.

Affected products

ASUS Live Update Versions prior to 3.6.8

Timeline

2021-10: other: Product reached End-of-Support (EOS)
2025-12-17: disclosed
2025-12-17: kev added: Added to CISA KEV catalog
2025-12-17: advisory: Vendor advisory published by ASUS

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.