CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-12-21
GIGABYTE Drivers (GPCIDrv/GDrv) Privilege Escalation and Kernel Code Execution (CVE-2018-19322)
[Affected Scope] GPCIDrv and GDrv drivers bundled with GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08
[Impact] Local attackers can exploit the exposed IO port read/write functionality to execute arbitrary code with kernel-level privileges (SYSTEM) and bypass security controls
[Mitigation] Update the affected GIGABYTE utilities to their latest secure versions, or block and remove the vulnerable drivers using Windows Defender Application Control (WDAC)