GIGABYTE

Vulnerability activity for GIGABYTE: what is being exploited, what was published lately, and when the next patch release is due.

All vendors Open in the dashboard

Last 30 days

CVEs: 0
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 90 days

CVEs: 0
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 365 days

CVEs: 3
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

7.8HighDec 21, 2018GIGABYTE Multiple ProductsCVE-2018-19320The GDrv low-level driver in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.Added to KEV Oct 24, 2022 · 1,402 days after publicationExploited4.6% likelyExploit code
7.8HighDec 21, 2018GIGABYTE Multiple Products Privilege escalationCVE-2018-19321The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.Added to KEV Oct 24, 2022 · 1,402 days after publicationExploited3.7% likelyExploit code
7.8HighDec 21, 2018GIGABYTE Multiple Products Code / command injectionCVE-2018-19322The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.Added to KEV Oct 24, 2022 · 1,402 days after publicationExploited1.8% likely
9.8CriticalDec 21, 2018GIGABYTE Multiple Products Privilege escalationCVE-2018-19323The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.Added to KEV Oct 24, 2022 · 1,402 days after publicationExploited8.4% likelyExploit code

Recent

7.8HighJul 13, 2026GIGABYTE MBStorage Auth bypass / access controlCVE-2026-9492The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIO_x64.sys bundled with the module, thereby arbitrarily reading and writing physical memory and obtaining kernel-level privileges.
7.8HighMar 30, 2026Gigabyte performance library DeserializationCVE-2026-4416The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation.
8.1HighMar 30, 2026Gigabyte control center Path traversal / file handlingCVE-2026-4415Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers can write arbitrary files to any location on the underlying operating system, leading to arbitrary code execution or privilege escalation.
9.8CriticalDec 21, 2018GIGABYTE Multiple Products Privilege escalationCVE-2018-19323The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.Exploited8.4% likelyExploit code
7.8HighDec 21, 2018GIGABYTE Multiple Products Code / command injectionCVE-2018-19322The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.Exploited1.8% likely
7.8HighDec 21, 2018GIGABYTE Multiple Products Privilege escalationCVE-2018-19321The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.Exploited3.7% likelyExploit code
7.8HighDec 21, 2018GIGABYTE Multiple ProductsCVE-2018-19320The GDrv low-level driver in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.Exploited4.6% likelyExploit code

See every GIGABYTE entry on the dashboard.