CVE-2018-19320

🗓️ 21 Dec 2018 00:00:00Reported by AttackerKBType

The GDrv driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 allows local attacker to take complete control of affected system

Reporter	Title	Published	Views	Family All 24
BDU FSTEC	Vulnerability of the GDrv driver – a program for configuring Gigabyte Aorus Engine graphics cards. The GIGABYTE App Center, a program for managing applications. The Extreme Gaming Engine, a program for monitoring the status of graphics cards. It allows a hacker to execute arbitrary code.	7 Nov 202200:00	–	bdu_fstec
Circl	CVE-2018-19320	7 Feb 202013:20	–	circl
CISA KEV Catalog	GIGABYTE Multiple Products Unspecified Vulnerability	24 Oct 202200:00	–	cisa_kev
CNVD	Arbitrary Code Execution Vulnerability in Multiple GIGABYTE Products (CNVD-2018-26457)	25 Dec 201800:00	–	cnvd
CVE	CVE-2018-19320	21 Dec 201823:00	–	cve
Cvelist	CVE-2018-19320	21 Dec 201823:00	–	cvelist
GithubExploit	Exploit for CVE-2018-19320	17 Feb 202620:48	–	githubexploit
GithubExploit	Exploit for CVE-2018-19320	19 Aug 202116:43	–	githubexploit
Tenable Nessus	GIGABYTE AORUS GRAPHICS ENGINE < 1.57 Multiple Vulnerabilities	11 Jan 202300:00	–	nessus
Tenable Nessus	GIGABYTE APP Center < 19.4.22.1 Multiple Vulnerabilities	11 Jan 202300:00	–	nessus

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
securityfocus	www.securityfocus.com/bid/106252
seclists	www.seclists.org/fulldisclosure/2018/Dec/39
gigabyte	www.gigabyte.com/tw/Support/Utility/Graphics-Card
gigabyte	www.gigabyte.com/Support/Security/1801
secureauth	www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities

21 Oct 2025 00:00Current

2.9Low risk

Vulners AI Score2.9

CVSS 27.2

CVSS 3.17.8

EPSS0.03597