{"cvss":7.8,"datePublished":"2022-10-24","dateUpdated":"2022-10-24","description":"The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.","dueDate":"2022-11-14","id":"CVE-2018-19321","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://www.gigabyte.com/Support/Security/1801; https://nvd.nist.gov/vuln/detail/CVE-2018-19321","product":"Multiple Products","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"GIGABYTE Multiple Products Privilege Escalation Vulnerability","vendor":"GIGABYTE"}