Actively exploited in the wild
GIGABYTE Multiple Products Privilege Escalation Vulnerability
GIGABYTE - Multiple Products · Listed in the CISA KEV since 2022-10-24. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2018-19323
CriticalCVSS 9.8KEVExploitation Probability (EPSS)
Very high risk95th percentile - higher than 95% of all known CVEs
Summary
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).
Risk Assessment
A local attacker can exploit this driver to manipulate MSRs, potentially leading to privilege escalation or system instability.
Recommendation
Update GIGABYTE software to the latest versions that address this vulnerability, or restrict access to the driver.
Original NVD description (English source)
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).