CVE-2018-19323
Published 2018-12-21 · Updated 2026-10-01 · Source cve@mitre.org
Summary
CVE-2018-19323 is a critical-severity (CVSS 9.8) vulnerability in GIGABYTE Multiple Products. CISA added it to the Known Exploited Vulnerabilities catalog on October 24, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by November 14, 2022. CISA also lists it as known to be used in ransomware campaigns, so it should be prioritised accordingly. GIGABYTE has 4 vulnerabilities in the KEV catalog, 4 of them linked to ransomware.
All 4 known-exploited GIGABYTE vulnerabilities →Description
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: GIGABYTE — Multiple Products
Name: GIGABYTE Multiple Products Privilege Escalation Vulnerability
Date added: 2022-10-24 · Due: 2022-11-14
Required action: Apply updates per vendor instructions.
References
- http://seclists.org/fulldisclosure/2018/Dec/39
- http://www.securityfocus.com/bid/106252
- https://www.gigabyte.com/Support/Security/1801
- https://www.gigabyte.com/tw/Support/Utility/Graphics-Card
- https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities
- http://seclists.org/fulldisclosure/2018/Dec/39
- http://www.securityfocus.com/bid/106252
- https://www.gigabyte.com/Support/Security/1801