Bloatware

pwning asus driverhub, msi center, acer control centre and razer synapse 4

24 July 2025 ~56 min By Leon Jacobs
Bloatware Exploit Development Privilege Escalation Research Reversing
At the beginning of this year I spent a week finding several vulnerabilities in various “bloatware” software. This was after I got suspicious of how my ASUS motherboard’s “DriverHub” behaved. In the end I looked at 6 targets from 6 random vendors (apart from ASUS) and found vulnerabilities ranging from Remote Code Execution to Local Privilege Escalation in all of them. Those were: ASUS, Acer, Lenovo, HP, MSI and Razer.