CVE-2022-38532

CVE-2022-38532 affects MSI Center 1.0.50.0, specifically the C_Features component in MSI.CentralServer.exe, enabling local privilege escalation via a crafted executable. Root cause: insecure handling in the Central Server’s feature CMD_AutoUpdateSDK path allows execution of an attacker-supplied P...

CVE-2022-31877

MSI Center v1.0.41.0 is affected by a privilege-escalation flaw in the MSI.TerminalServer.exe component. The issue allows an attacker to elevate privileges by sending a crafted TCP packet. Public guidance across connected sources confirms the affected product/version and the underlying component;...

CVE-2021-44899

CVE-2021-44899 concerns Micro-Star International (MSI) Center <= 1.0.31.0. The connected documents describe multiple privilege escalation vulnerabilities in MSI Center’s driver components (atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLib_X64.sys, WinRing0.sys, WinRing0x64.sys). All...

CVE-2026-37454

CVE-2026-37454 concerns MSI Centre’s MSI NBFoundation Service (MSIAPService.exe) where a 3DES-ECB cipher and a publicly accessible named pipe expose insecure permissions. The vulnerability surface includes the REG command group (read/write/delete HKLM/HKCU keys, enabling persistence and service h...

CVE-2026-37453

MSI Center’s NBFoundation Service (MSIAPService.exe) has CVE-2026-37453: an insecure named pipe (\.\pipe\MSI_SERVICE_2) exposed to all authenticated users that allows untrusted clients to perform arbitrary memory and I/O-port read/write via the WinIO wrapper. Root cause is unauthenticated access ...