ASRock ASRock Polychrome SYNC/RGB for MB vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting ASRock ASRock Polychrome SYNC/RGB for MB: 2 record(s), with affected versions and fixes.
CVE-2026-90891
Medium · 5.5
CWE-1256 Sep 14, 2026
ASRock｜ASRock Polychrome SYNC/RGB software utility - Improper Access Control
ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restricted I/O ports, resulting in a forced operating system reboot.
CVE-2026-90890
Medium · 5.5
CWE-822 Sep 14, 2026
ASRock｜ASRock Polychrome SYNC/RGB software utility - Untrusted Pointer Dereference
ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to dereference an unvalidated pointer, resulting in an operating system crash.