← CVE Radar
CVE-2018-19323GIGABYTE Multiple Products Privilege Escalation Vulnerability
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).
9.8 CRITICALEPSS 8.36%⚡ Known Exploited (CISA KEV)NVD: Published
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1CISA-ADP | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2018-19323
- Status
- Published
- Assigner (CNA)
- mitre
- Published
- Dec 21, 2018
- Last modified
- 2026-10-01 20:27 UTC
Affected Products
No affected products have been published for this CVE yet.
References
- seclists.org http://seclists.org/fulldisclosure/2018/Dec/39
- secureauth.com https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities
- securityfocus.com http://www.securityfocus.com/bid/106252
- gigabyte.com https://www.gigabyte.com/tw/Support/Utility/Graphics-Card
- gigabyte.com https://www.gigabyte.com/Support/Security/1801
Sources
- NVD (unavailable at last refresh)
- CVE.org
- CISA KEV
- FIRST EPSS