CVE-2019-19235

CVE-2019-19235 describes a vulnerability in AsLdrSrv.exe within the ASUS ATK Package (versions prior to V1.0.0061 for Windows 10 notebook PCs) that allows for unsigned code execution. An attacker with local access could achieve this by placing a malicious application at a specific path with a particular filename. This vulnerability is rated as HIGH severity (CVSS 7.0) due to its potential for high impact on confidentiality, integrity, and availability, despite requiring high attack complexity and low privileges. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has received limited community discussion and media coverage.