Vulnerabilidades de Gigabyte
CVEs publicadas que afetam produtos de Gigabyte: 7 registro(s), com severidade, exploração e correções.
Aorus Graphics Engine 4Gigabyte App Center 4Oc Guru Ii 4Xtreme Gaming Engine 4Control Center 1Performance Library 1MacroHub 1
CVE-2026-4416
Alta · 7.8
CWE-502 30/03/2026
GIGABYTE｜Performance Library - Insecure Deserialization
The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation.
CVE-2026-4415
Crítica · 9.8
CWE-787 30/03/2026
GIGABYTE｜Gigabyte Control Center - Arbitrary File Write
Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers can write arbitrary files to any location on the underlying operating system, leading to arbitrary code execution or privilege escalation.
CVE-2026-0870
Alta · 7.8
CWE-250 09/02/2026
GIGABYTE｜MacroHub - Local Privilege Escalation
MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability. Due to the MacroHub application launching external applications with improper privileges, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges.
CVE-2018-19320
Alta · 7.8
KEV Alta · 64 Ransomware 21/12/2018
GIGABYTE Multiple Products Unspecified Vulnerability
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.
CVE-2018-19321
Alta · 7.8
KEV Alta · 64 Ransomware 21/12/2018
GIGABYTE Multiple Products Privilege Escalation Vulnerability
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.
CVE-2018-19322
Alta · 7.8
KEV Alta · 63 Ransomware CWE-749 21/12/2018
GIGABYTE Multiple Products Code Execution Vulnerability
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.
CVE-2018-19323
Crítica · 9.8
KEV Alta · 69 Ransomware 21/12/2018
GIGABYTE Multiple Products Privilege Escalation Vulnerability
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).