{"cvss":9.8,"datePublished":"2022-10-24","dateUpdated":"2022-10-24","description":"The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.","dueDate":"2022-11-14","id":"CVE-2018-19323","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://www.gigabyte.com/Support/Security/1801; https://nvd.nist.gov/vuln/detail/CVE-2018-19323","product":"Multiple Products","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"cisa_known_exploited","title":"GIGABYTE Multiple Products Privilege Escalation Vulnerability","vendor":"GIGABYTE"}