CVE-2018-19323
קריטית 9.8 מנוצלת בשטח (KEV) בשימוש בכופרה
ניצול פעיל מאומת — קטלוג CISA KEV
- שם
- GIGABYTE Multiple Products Privilege Escalation Vulnerability
- נוסף לקטלוג
- יעד טיפול (פדרלי)
- פעולה נדרשת
- Apply updates per vendor instructions.
תיאור (מקור, אנגלית)
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).
מדדים
- CVSS 3.1
-
9.8 (CRITICAL)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 9% (אחוזון 100) נכון ל-25/7/2026
מוצרים מושפעים
gigabyte: aorus graphics engine; gigabyte: gigabyte app center; gigabyte: oc guru ii; gigabyte: xtreme gaming engine
קישורים
- https://www.gigabyte.com/Support/Security/1801 Vendor Advisory
- https://www.gigabyte.com/Support/Security/1801 Vendor Advisory
- http://seclists.org/fulldisclosure/2018/Dec/39 ExploitMailing ListThird Party Advisory
- https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privileg… Broken LinkExploitThird Party Advisory
- http://seclists.org/fulldisclosure/2018/Dec/39 ExploitMailing ListThird Party Advisory
- https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privileg… Broken LinkExploitThird Party Advisory
- http://www.securityfocus.com/bid/106252 Broken LinkThird Party AdvisoryVDB Entry
- https://www.gigabyte.com/tw/Support/Utility/Graphics-Card Product
- http://www.securityfocus.com/bid/106252 Broken LinkThird Party AdvisoryVDB Entry
- https://www.gigabyte.com/tw/Support/Utility/Graphics-Card Product