CVE-2022-38532

CVE-2022-38532 affects MSI Center 1.0.50.0, specifically the C_Features component in MSI.CentralServer.exe, enabling local privilege escalation via a crafted executable. Root cause: insecure handling in the Central Server’s feature CMD_AutoUpdateSDK path allows execution of an attacker-supplied P...

CVE-2022-31877

MSI Center v1.0.41.0 is affected by a privilege-escalation flaw in the MSI.TerminalServer.exe component. The issue allows an attacker to elevate privileges by sending a crafted TCP packet. Public guidance across connected sources confirms the affected product/version and the underlying component;...

CVE-2026-37454

A vulnerability exists in the MSI NBFoundation Service (specifically the MSIAPService.exe component) provided by Micro-Star International (MSI) . The Insecure Permissions vulnerability allows a local attacker to perform arbitrary HKLM and HKCU registry read, write, and delete operations through t...

CVE-2021-44899

CVE-2021-44899 concerns Micro-Star International (MSI) Center <= 1.0.31.0. The connected documents describe multiple privilege escalation vulnerabilities in MSI Center’s driver components (atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLib_X64.sys, WinRing0.sys, WinRing0x64.sys). All...

CVE-2026-37453

The MSI NBFoundation Service (specifically MSIAPService.exe) contains an insecure permissions vulnerability in version v.2.0.2506.1201 . The service, which runs with SYSTEM privileges, exposes a named pipe (\.\pipe\MSI_SERVICE_2) to all Authenticated Users with insufficient authentication. This a...