{"id":"CVE-2018-19323","published":"2018-12-21T23:29:00Z","modified":"2026-10-01T21:17:13Z","title":"GIGABYTE Multiple Products Privilege Escalation Vulnerability","vendor":"GIGABYTE","product":"Multiple Products","tier":"core","eol":null,"description":{"text":"The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).","provenance":"source","from":"NVD"},"summary":{"text":"The GDrv low-level driver shipped with several GIGABYTE products (APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08) exposes functionality that reads and writes Machine Specific Registers (MSRs). An attacker with network access and no authentication or user interaction can exploit this to reach high confidentiality, integrity, and availability impact.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T06:58:28Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.08364,"percentile":0.94946,"date":"2026-10-28","provenance":"source"},"kev":{"dateAdded":"2022-10-24","dueDate":"2022-11-14","ransomware":true,"requiredAction":"Apply updates per vendor instructions.","notes":"https://www.gigabyte.com/Support/Security/1801; https://nvd.nist.gov/vuln/detail/CVE-2018-19323","provenance":"source"},"vulncheckKev":{"dateAdded":"2022-10-24","exploitedFirstSeen":"2022-10-24","ransomware":true,"evidence":[{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2022-10-24"},{"url":"https://bi.zone/upload/for_download/Threat_Zone_2025_BI.ZONE_Research_rus.pdf","date":"2025-04-08"}],"evidenceTotal":2,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"},{"name":"Actively_Exploited_Kev | Oct 18, 2026","url":"https://otx.alienvault.com/pulse/6ad38c22e1848f8189d1c121","created":"2026-10-17"}],"provenance":"machine"},"cwes":[],"references":[{"url":"http://seclists.org/fulldisclosure/2018/Dec/39","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/106252","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://www.gigabyte.com/Support/Security/1801","tags":["Vendor Advisory"]},{"url":"https://www.gigabyte.com/tw/Support/Utility/Graphics-Card","tags":["Product"]},{"url":"https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities","tags":["Broken Link","Exploit","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2018/Dec/39","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/106252","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://www.gigabyte.com/Support/Security/1801","tags":["Vendor Advisory"]},{"url":"https://www.gigabyte.com/tw/Support/Utility/Graphics-Card","tags":["Product"]},{"url":"https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities","tags":["Broken Link","Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-19323","tags":["US Government Resource"]}],"techniques":[{"id":"T1068","name":"Exploitation for Privilege Escalation","tactics":["privilege-escalation"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: driver exposes kernel-level MSR access for exploitation","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"exposes functionality to read and write Machine Specific Registers","start":161,"end":227}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1014","name":"Rootkit","tactics":["stealth"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: kernel-mode rootkit-style access via driver MSR access","mappingType":"primary_impact","evidence":[{"from":"description","quote":"exposes functionality to read and write Machine Specific Registers","start":161,"end":227}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2018-11021","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-11021","exploited":true,"exploitedSince":"2022-10-24","provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2025-08-27","earliestUrl":"https://github.com/blueisbeautiful/CVE-2018-19323","repos":[{"name":"blueisbeautiful/CVE-2018-19323","url":"https://github.com/blueisbeautiful/CVE-2018-19323","stars":0,"created":"2025-08-27"}]},"first":{"date":"2025-08-27","source":"PoC-in-GitHub","url":"https://github.com/blueisbeautiful/CVE-2018-19323"},"provenance":"source"},"exploitRefs":["http://seclists.org/fulldisclosure/2018/Dec/39","https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities"],"flow":[{"stage":"exploitation","techniques":["T1068"],"provenance":"ai"},{"stage":"primary","techniques":["T1014"],"provenance":"ai"}],"timeline":[{"date":"2018-12-21","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19323","provenance":"source"},{"date":"2022-10-24","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","provenance":"source"},{"date":"2022-10-24","kind":"kev","label":"Added to CISA KEV (known ransomware use)","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2022-10-24","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-11021","provenance":"source"},{"date":"2025-08-27","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/blueisbeautiful/CVE-2018-19323","provenance":"source"}],"speed":{"daysToPublicExploit":2441,"firstExploitFrom":"PoC-in-GitHub","daysToKev":1403},"priority":{"score":78.8,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1466 days ago"},{"name":"Known ransomware use","points":10.0,"detail":"CISA KEV and VulnCheck KEV: Known"},{"name":"EPSS percentile","points":18.99,"detail":"percentile 0.9495"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 NVD references tagged Exploit; 1 PoC-in-GitHub repo"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}