CVE-2018-19323

Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score71.7050%

EPSS Percentile91.91th

Published2018年12月21日

Last Modified2025年11月7日

Vulnerability Description

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).

Affected Platforms (CPE)

📦

Gigabyte

Aorus Graphics Engine

< 1.57

📦

Gigabyte

Gigabyte App Center

<= 1.05.21

📦

Gigabyte

Oc Guru Ii

= 2.08

📦

Gigabyte

Xtreme Gaming Engine

< 1.26

References & Advisories

🔗 http://seclists.org/fulldisclosure/2018/Dec/39

🔗 http://www.securityfocus.com/bid/106252

🔗 https://www.gigabyte.com/Support/Security/1801

🔗 https://www.gigabyte.com/tw/Support/Utility/Graphics-Card

🔗 https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities

🔗 http://seclists.org/fulldisclosure/2018/Dec/39

🔗 http://www.securityfocus.com/bid/106252

🔗 https://www.gigabyte.com/Support/Security/1801

Vulnerability Description

Affected Platforms (CPE)

Aorus Graphics Engine

Gigabyte App Center

Oc Guru Ii

Xtreme Gaming Engine

References & Advisories

相关漏洞威胁