{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: GIGABYTE vulnerabilities","home_page_url":"https://patchfirst.co/vendor/gigabyte/","feed_url":"https://patchfirst.co/feed/vendor/gigabyte.json","description":"New and newly exploited GIGABYTE CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2018-19323#kev","url":"https://patchfirst.co/cve/CVE-2018-19323/","title":"[KEV] CVE-2018-19323: GIGABYTE Multiple Products Privilege Escalation Vulnerability","content_text":"GIGABYTE · Multiple Products. In CISA KEV since 2022-10-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 8.4% (higher than 95% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1014 Rootkit. Priority 78.9 of 100.","summary":"GIGABYTE Multiple Products Privilege Escalation Vulnerability","date_published":"2022-10-24T00:00:00.000Z","date_modified":"2026-10-01T21:17:13.000Z","tags":["kev","ransomware","public-exploit","T1068","T1014"],"_patchfirst":{"reason":"kev","priority":78.9,"kev":{"dateAdded":"2022-10-24","ransomware":true},"epss":{"score":0.08364,"percentile":0.94959},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"GIGABYTE","product":"Multiple Products","techniqueIds":["T1068","T1014"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2018-19320#kev","url":"https://patchfirst.co/cve/CVE-2018-19320/","title":"[KEV] CVE-2018-19320: GIGABYTE Multiple Products Unspecified Vulnerability","content_text":"GIGABYTE · Multiple Products. In CISA KEV since 2022-10-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 4.6% (higher than 91.6% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1014 Rootkit. Priority 76.8 of 100.","summary":"GIGABYTE Multiple Products Unspecified Vulnerability","date_published":"2022-10-24T00:00:00.000Z","date_modified":"2026-08-13T05:17:16.000Z","tags":["kev","ransomware","public-exploit","T1068","T1014"],"_patchfirst":{"reason":"kev","priority":76.8,"kev":{"dateAdded":"2022-10-24","ransomware":true},"epss":{"score":0.04597,"percentile":0.91646},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"GIGABYTE","product":"Multiple Products","techniqueIds":["T1068","T1014"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2018-19321#kev","url":"https://patchfirst.co/cve/CVE-2018-19321/","title":"[KEV] CVE-2018-19321: GIGABYTE Multiple Products Privilege Escalation Vulnerability","content_text":"GIGABYTE · Multiple Products. In CISA KEV since 2022-10-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 3.7% (higher than 89.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 76.4 of 100.","summary":"GIGABYTE Multiple Products Privilege Escalation Vulnerability","date_published":"2022-10-24T00:00:00.000Z","date_modified":"2026-08-13T05:17:16.000Z","tags":["kev","ransomware","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":76.4,"kev":{"dateAdded":"2022-10-24","ransomware":true},"epss":{"score":0.03701,"percentile":0.89723},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"GIGABYTE","product":"Multiple Products","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2018-19322#kev","url":"https://patchfirst.co/cve/CVE-2018-19322/","title":"[KEV] CVE-2018-19322: GIGABYTE Multiple Products Code Execution Vulnerability","content_text":"GIGABYTE · Multiple Products. In CISA KEV since 2022-10-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 1.8% (higher than 78.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1082 System Information Discovery. Priority 74.2 of 100.","summary":"GIGABYTE Multiple Products Code Execution Vulnerability","date_published":"2022-10-24T00:00:00.000Z","date_modified":"2026-08-13T05:17:16.000Z","tags":["kev","ransomware","public-exploit","T1068","T1082"],"_patchfirst":{"reason":"kev","priority":74.2,"kev":{"dateAdded":"2022-10-24","ransomware":true},"epss":{"score":0.01816,"percentile":0.78667},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"GIGABYTE","product":"Multiple Products","techniqueIds":["T1068","T1082"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2017-3197","url":"https://patchfirst.co/cve/CVE-2017-3197/","title":"CVE-2017-3197: GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection","content_text":"GIGABYTE · GB-BSi7H-6500. Not in CISA KEV. EPSS 5.6% (higher than 92.9% of CVEs). Priority 63.6 of 100.","summary":"GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection","date_published":"2018-07-09T00:00:00.000Z","date_modified":"2024-08-05T14:16:28.000Z","tags":[],"_patchfirst":{"reason":"published","priority":63.6,"kev":null,"epss":{"score":0.05569,"percentile":0.92857},"cvss":null,"vendor":"GIGABYTE","product":"GB-BSi7H-6500","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2017-3198","url":"https://patchfirst.co/cve/CVE-2017-3198/","title":"CVE-2017-3198: GIGABYTE BRIX UEFI firmware is not cryptographically signed","content_text":"GIGABYTE · GB-BSi7H-6500. Not in CISA KEV. EPSS 1.6% (higher than 75.4% of CVEs). Priority 60.1 of 100.","summary":"GIGABYTE BRIX UEFI firmware is not cryptographically signed","date_published":"2018-07-09T00:00:00.000Z","date_modified":"2024-08-05T14:16:28.000Z","tags":[],"_patchfirst":{"reason":"published","priority":60.1,"kev":null,"epss":{"score":0.01576,"percentile":0.75436},"cvss":null,"vendor":"GIGABYTE","product":"GB-BSi7H-6500","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}