CVE WatchSep 14, 2026

CVE-2026-90891

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attac

CVSS

5.5

Medium

EPSS

—

KEV

—

Exploit Today

0-100

Published: Sep 14, 2026 · Last modified: Sep 14, 2026 · CWE-1256

EPSS · 30d

Not enough EPSS history yet.

Technical description

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restricted I/O ports, resulting in a forced operating system reboot.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-75811—

1.2%

——0Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and potentially cause hardware damage by bypassing driver authentication and accessing critical model-specific registers.Refer to the ' Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.7d