Gigabyte vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Gigabyte products: 7 record(s), with severity, exploitation and fixes.

Aorus Graphics Engine 4 Gigabyte App Center 4 Oc Guru Ii 4 Xtreme Gaming Engine 4 Control Center 1 Performance Library 1 MacroHub 1

Exploited only (KEV) →

CVE-2026-4416 High · 7.8 CWE-502 Mar 30, 2026

GIGABYTE｜Performance Library - Insecure Deserialization

The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation.

CVE-2026-4415 Critical · 9.8 CWE-787 Mar 30, 2026

GIGABYTE｜Gigabyte Control Center - Arbitrary File Write

Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers can write arbitrary files to any location on the underlying operating system, leading to arbitrary code execution or privilege escalation.

CVE-2026-0870 High · 7.8 CWE-250 Feb 9, 2026

GIGABYTE｜MacroHub - Local Privilege Escalation

MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability. Due to the MacroHub application launching external applications with improper privileges, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges.

CVE-2018-19320 High · 7.8 KEV High · 64 Ransomware Dec 21, 2018

GIGABYTE Multiple Products Unspecified Vulnerability

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.

CVE-2018-19321 High · 7.8 KEV High · 64 Ransomware Dec 21, 2018

GIGABYTE Multiple Products Privilege Escalation Vulnerability

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.

CVE-2018-19322 High · 7.8 KEV High · 63 Ransomware CWE-749 Dec 21, 2018

GIGABYTE Multiple Products Code Execution Vulnerability

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.

CVE-2018-19323 Critical · 9.8 KEV High · 69 Ransomware Dec 21, 2018

GIGABYTE Multiple Products Privilege Escalation Vulnerability

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).