CVE-2018-19322
High · 7.8 CISA KEV · ransomwareCVSS
7.8
EPSS
1.8%
Published
Dec 21, 2018
CISA due date
Nov 14, 2022
The record
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-20293 A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation… CWE-749
- CVE-2026-86711 electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron… CWE-749
- CVE-2026-52877 Streambert is a cross-platform Electron Desktop App to stream and download video content. CWE-749
- CVE-2026-48056 Streambert is a cross-platform Electron Desktop App to stream and download video content. CWE-749
- CVE-2026-20467 In apusys, there is a possible escalation of privilege due to a missing bounds check. CWE-749
- CVE-2026-45489 Microsoft Edge (Chromium-based) Spoofing Vulnerability CWE-749
- CVE-2026-14620 webpack-dev-server versions 5.2.5 and earlier expose two internal developer endpoints… CWE-749
- CVE-2026-54753 Nx is a monorepo solution for TypeScript and polyglot codebases. CWE-749