Gigabyte

14 CVEs across 674 Gigabyte products. Browse Gigabyte vulnerabilities, severities, and proof-of-concept exploits.

Gigabyte products with known CVEs

ProductCVEs
Aorus Graphics Engine4
App Center4
Oc Guru Ii4
Xtreme Gaming Engine4
Dldrv2 Activex Control2
Gb-Bsi7h-65002
Gb-Bsi7h-6500 Firmware2
Gb-Bxi7-57752
Gb-Bxi7-5775 Firmware2
Uefi-Genericcomponentsmmentry2
Amd 600 Chipset Motherboard1
Amd 800 Chipset Motherboard1
Amd Trx50 Chipset Motherboard1
B760m D2hx Lite Si (Rev. 1.0)1
C621 Aorus Xtreme (Rev. 1.0)1
C621-Sd81
C621-Su8 (Rev. 1.0)1
C621-Wd121
C621-Wd12-Ipmi (Rev. 1.0)1
Control Center1
D120-C20 (Rev. 230)1
E133-C101
E133-C10 (Rev. Aaa1)1
E152-Ze01
E152-Ze1 (Rev. A00)1
E162-2201
E163-S30 (Rev. Aab1)1
E163-Z301
E251-U70 (Rev. 100)1
E283-S90 (Rev. Aad1)1
E283-Z901
E283-Z91 (Rev. Aav1)1
El-20-3060-32g (Rev. 1.0)1
El-30 (Rev. 1.0)1
G150-B10 (Rev. 111)1
G152-Z121
G152-Z12 (Rev. 200)1
G180-G00 (Rev. 100)1
G182-C201
G190-G301
G190-H441
G191-H441
G1.sniper 3 (Rev. 1.0)1
G1.sniper B71
G1.sniper M31
G1.sniper M7 (Rev. 1.0)1
G1.sniper Z170 (Rev. 1.0)1
G210-H4g (Rev. 100)1
G211-H4g1
G221-Z301
Gigabyte CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-9492High7.82026-07-13The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed by GIGABYTE Technology has an Improper Access Control vulnerability…
CVE-2026-4416High7.82026-03-30The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious…
CVE-2026-4415High8.12026-03-30Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers…
CVE-2026-0870High7.82026-02-09MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability. Due to the MacroHub application launching external applications with improper pr…
CVE-2025-14302Medium6.82025-12-17Certain motherboard models developed by GIGABYTE has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated phys…
CVE-2025-7029High8.22025-07-11A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used to derive pointers (OcHea…
CVE-2025-7028High7.82025-07-11A vulnerability in the Software SMI handler (SwSmiInputValue 0x20) allows a local attacker to supply a crafted pointer (FuncBlock) through RBX and RCX register…
CVE-2025-7027High8.22025-07-11A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control both the read and write addresses used by the CommandRcx1…
CVE-2025-7026High8.22025-07-11A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used as an unchecked pointer i…
CVE-2024-8105Medium6.42024-08-26A vulnerability exists in UEFI implementations that use a hard-coded software-based Platform Key (PK). An attacker in possession of the corresponding PK privat…
CVE-2019-7630High7.22020-03-25An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does no…
CVE-2018-19323Critical9.82018-12-21The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.0…
CVE-2018-19322High7.82018-12-21The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC…
CVE-2018-19321High7.82018-12-21The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC…
CVE-2018-19320High7.82018-12-21The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.0…
CVE-2017-3198Critical9.82018-07-09GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additionally, the firmware updates are served ove…
CVE-2017-3197Critical9.82018-07-09GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PR…
CVE-2010-15182010-08-02Array index error in the SetDLInfo method in the GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to execute arbitrary code or cause a denial…
CVE-2010-15172010-08-02The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to (1) download arbitrary programs onto a client system, and execute these programs, via…
CVE-2004-03282004-11-23Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the same local network as the router to bypass authentication by usin…