CVE Intelligence

ASRock vulnerabilities

🔔 Create alert RSS

Published CVEs affecting ASRock products: 2 record(s), with severity, exploitation and fixes.

ASRock Polychrome SYNC/RGB for MB 2ASRock Polychrome SYNC/RGB for VGA 2

Exploited only (KEV) →

CVE-2026-90891 Medium · 5.5 CWE-1256 Sep 14, 2026
ASRock｜ASRock Polychrome SYNC/RGB software utility - Improper Access Control
ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restricted I/O ports, resulting in a forced operating system reboot.
CVE-2026-90890 Medium · 5.5 CWE-822 Sep 14, 2026
ASRock｜ASRock Polychrome SYNC/RGB software utility - Untrusted Pointer Dereference
ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to dereference an unvalidated pointer, resulting in an operating system crash.