CVE Watch—

CVE-2018-19321

GIGABYTE Multiple Products Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

3.7%

p88

KEV

YES

Oct 24, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

3.7%EPSS · 30 days3.7%

2026-06-302026-07-17

KEV catalog record

Product

GIGABYTE / Multiple Products

Vulnerability

GIGABYTE Multiple Products Privilege Escalation Vulnerability

Added to KEV

Oct 24, 2022

Remediate by

Nov 14, 2022

Known ransomware use

Yes

Summary description

The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.

Required action

Apply updates per vendor instructions.

Notes

https://www.gigabyte.com/Support/Security/1801; https://nvd.nist.gov/vuln/detail/CVE-2018-19321

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2018-19323—

94.4%

KEV—78GIGABYTE Multiple Products Privilege Escalation Vulnerability—CVE-2018-19320—

88.2%

KEV—76GIGABYTE Multiple Products Unspecified Vulnerability—CVE-2018-19322—

77.0%

KEV—73GIGABYTE Multiple Products Code Execution Vulnerability—