Gigabyte

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-4416 1Gigabyte 1Performance Library Jun 17, 2026 Mar 30, 2026 8.5 HIGH· v4 7.8 HIGH· v3 N/A· v2 The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting...Show more The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation.Show less
CVE-2026-4415 1Gigabyte 1Control Center Jun 17, 2026 Mar 30, 2026 9.2 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers can write arbitrary files to any location on the underlying o...Show more Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers can write arbitrary files to any location on the underlying operating system, leading to arbitrary code execution or privilege escalation.Show less
CVE-2019-7630 1Gigabyte 1App Center Jun 17, 2026 Mar 25, 2020 N/A· v4 7.2 HIGH· v3 9.0 HIGH· v2 An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter the target Model Specific Register (MSR). A...Show more An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter the target Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.Show less
CVE-2018-19323 1Gigabyte 4Aorus Graphics Engine Gigabyte App CenterOc Guru Ii+1 more Nov 7, 2025 Dec 21, 2018 N/A· v4 9.8 CRITICAL· v3 9.0 HIGH· v2 The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Re...Show more The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).Show less
CVE-2018-19322 1Gigabyte 4Aorus Graphics Engine App CenterOc Guru Ii+1 more Nov 7, 2025 Dec 21, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read/write data from/t...Show more The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.Show less
CVE-2018-19321 1Gigabyte 4Aorus Graphics Engine App CenterOc Guru Ii+1 more Nov 7, 2025 Dec 21, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitra...Show more The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.Show less
CVE-2018-19320 1Gigabyte 4Aorus Graphics Engine App CenterOc Guru Ii+1 more Nov 7, 2025 Dec 21, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a...Show more The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.Show less
CVE-2017-3198 1Gigabyte 2Gb Bsi7h 6500 Firmware Gb Bxi7 5775 Firmware Nov 21, 2024 Jul 9, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additionally, the firmware updates are served over HTTP. An attacker can make arbitrary modifications to firmw...Show more GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additionally, the firmware updates are served over HTTP. An attacker can make arbitrary modifications to firmware images without being detected.Show less
CVE-2017-3197 1Gigabyte 2Gb Bsi7h 6500 Firmware Gb Bxi7 5775 Firmware Nov 21, 2024 Jul 9, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbit...Show more GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.Show less
CVE-2010-1518 1Gigabyte 1Dldrv2 Activex Control Apr 29, 2026 Aug 2, 2010 N/A· v4 N/A· v3 10.0 HIGH· v2 Array index error in the SetDLInfo method in the GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via the item argument.
CVE-2010-1517 1Gigabyte 1Dldrv2 Activex Control Apr 29, 2026 Aug 2, 2010 N/A· v4 N/A· v3 10.0 HIGH· v2 The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to (1) download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and (2) download arbitrary...Show more The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to (1) download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and (2) download arbitrary programs onto a client system via vectors involving the SetDLInfo method in conjunction with the Bdl method.Show less
CVE-2004-0328 1Gigabyte 1Gn B46b Apr 16, 2026 Nov 23, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the same local network as the router to bypass authentication by using a copy of the router's html menu on a separate system.