CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-12-21
GIGABYTE GDrv Driver MSR Arbitrary Read/Write Privilege Escalation Vulnerability (CVE-2018-19323)
[Affected Scope] GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08
[Impact] Local attackers can read and write Machine Specific Registers (MSRs) at the kernel level, enabling Driver Signature Enforcement (DSE) bypass and arbitrary Ring 0 code execution
[Mitigation] Immediately uninstall vulnerable GIGABYTE utilities or upgrade to patched versions, and enforce WDAC policies to block the loading of the vulnerable GDrv.sys driver