CVE-2018-19323

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).

CVSS 3.1

9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

8.4% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-25)

CISA KEV

listed 2022-10-24, due 2022-11-14, known ransomware use

Published

2018-12-21

Modified

2026-10-01

Record from

the NVD, synced 2026-10-19

Affected

• gigabyte:aorus_graphics_engine
• gigabyte:gigabyte_app_center
• gigabyte:oc_guru_ii
• gigabyte:xtreme_gaming_engine

References

• http://seclists.org/fulldisclosure/2018/Dec/39
• http://www.securityfocus.com/bid/106252
• https://www.gigabyte.com/Support/Security/1801
• https://www.gigabyte.com/tw/Support/Utility/Graphics-Card
• https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities

Check your stackJSON