CVE-2026-37453

MSI NBFoundation Service (MSIAPService.exe) is exposed via the named pipe \.\pipe\MSI_SERVICE_2 with no caller authentication. The IO command surface enables unauthenticated ReadMemory/WriteMemory and ReadPort/WritePort through WinIO, allowing arbitrary physical memory and I/O-port access (system...

CVE-2026-37452

MSI NBFoundation Service’s MSIAPService.exe exposes an insecure named pipe (\.\pipe\MSI_SERVICE_2) accessible to all authenticated users, enabling three vulnerable command surfaces (PC:REXE, IO, REG) that run under SYSTEM privileges with no caller authentication. CVE-2026-37452 specifically allow...

CVE-2026-37454

CVE-2026-37454 affects MSI Center / MSI NBFoundation Service (MSIAPService.exe). The REG command group (REG:RREQ/WREQ/DREQ) allows read/write/delete of arbitrary HKLM or HKCU keys without caller authentication, enabling potential persistence or service hijacking. Root cause is an insecure IPC sur...