CVE-2026-9492
High · 7.8CVSS
7.8
EPSS
0.2%
Published
Jul 13, 2026
CISA due date
—
The record
The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIO_x64.sys bundled with the module, thereby arbitrarily reading and writing physical memory and obtaining kernel-level privileges.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-80116 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-782
- CVE-2026-80117 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-782
- CVE-2026-80113 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-782
- CVE-2026-57851 MSI Feature Manager contains a local privilege escalation vulnerability in the… CWE-782
- CVE-2026-8797 An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. CWE-782
- CVE-2026-56129 Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook… CWE-782
- CVE-2026-8501 Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet… CWE-782
- CVE-2026-6737 An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a… CWE-782