AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-19321

HIGH · CVSS 7.8 EPSS 3.67% CISA KEV · Actively Exploited

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-12-21 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CISA KEV Details

Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.

Ransomware use: Known

Added to KEV: 2022-10-24

Required action: Apply updates per vendor instructions.

CVE
CVE-2018-19321
Severity
HIGH
CVSS
7.8
EPSS
3.67%

Original NVD Description

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.