CVE-2018-19323

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Oct 1, 2026

Description

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Dec 21, 2018
Last modified
Oct 1, 2026
Added to CISA KEV
Oct 24, 2022
NVD status
Analyzed

Related CVEs from 2018

CVE-2018-193245.4kimsQ Rb 2.3.0 allows XSS via the second input field to the /?r=home&mod=mypage&page=info URI.CVE-2018-193267.5Zyxel VMG1312-B10D devices before 5.13(AAXA.8)C0 allow ../ Directory Traversal, as demonstrated by reading /etc/passwd.CVE-2018-193278.8An issue was discovered in JTBC(PHP) 3.0.1.7. aboutus/manage.php?type=action&action=add allows CSRF.CVE-2018-193289.8LAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal.CVE-2018-193294.9GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an m=adminCVE-2018-19335.4IBM Planning Analytics 2.0 through 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScripCVE-2018-193317.5An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter.CVE-2018-193328.8An issue was discovered in S-CMS v1.5. There is a CSRF vulnerability that can add a new user via the admin/ajax.php?type=member&action=add UCVE-2018-193339.8pkg/sentry/kernel/shm/shm.go in Google gVisor before 2018-11-01 allows attackers to overwrite memory locations in processes running as root CVE-2018-193345.3Google Monorail before 2018-05-04 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected by CSRF, and calculatCVE-2018-193355.3Google Monorail before 2018-06-07 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected by CSRF, and calculatCVE-2018-19348.8IBM Cognos Business Intelligence 10.2.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and u