AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-19323

CRITICAL · CVSS 9.8 EPSS 8.52% CISA KEV · Actively Exploited

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-12-21 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It is listed in CISA's Known Exploited Vulnerabilities catalog, indicating confirmed active exploitation in the wild.

CISA KEV Details

Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.

Ransomware use: Known

Added to KEV: 2022-10-24

Required action: Apply updates per vendor instructions.

CVE
CVE-2018-19323
Severity
CRITICAL
CVSS
9.8
EPSS
8.52%

Original NVD Description

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).

Related CVEs

Other vulnerabilities affecting the same vendor(s)