Vendor

    Gigabyte

    20 known vulnerabilities in products by Gigabyte, 4 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    4

    Actively exploited (KEV)

    4

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Gigabyte
    CriticalCVE-2018-19323

    GIGABYTE Multiple Products Privilege Escalation Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2018-19320

    GIGABYTE Multiple Products Unspecified Vulnerability

    In CISA KEVRansomware

    		7.8
    CriticalCVE-2018-19321

    GIGABYTE Multiple Products Privilege Escalation Vulnerability

    In CISA KEVRansomware

    		7.8
    CriticalCVE-2018-19322

    GIGABYTE Multiple Products Code Execution Vulnerability

    In CISA KEVRansomware

    		7.8
    CriticalCVE-2017-3197

    GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection

    		9.8
    HighCVE-2019-7630

    Gigabyte App Center: Code Execution

    		7.2
    CriticalCVE-2017-3198

    GIGABYTE BRIX UEFI firmware is not cryptographically signed

    		9.8
    CriticalCVE-2026-4415

    GIGABYTE｜Gigabyte Control Center - Arbitrary File Write

    		8.1
    HighCVE-2026-9492

    GIGABYTE｜Gigabyte Control Center - Improper Access Control

    		7.8
    Not ratedCVE-2010-1518

    GIGABYTE Dldrv2 ActiveX control: Memory Corruption

    		—
    HighCVE-2026-4416

    GIGABYTE｜Performance Library - Insecure Deserialization

    		7.8
    HighCVE-2026-0870

    GIGABYTE｜MacroHub - Local Privilege Escalation

    		7.8
    HighCVE-2025-14302

    GIGABYTE｜Motherboard - Protection Mechanism Failure

    		6.8
    HighCVE-2025-7029

    SMM Arbitrary Write via Unchecked OcHeader Buffer in Platform Configuration Handler

    		8.2
    HighCVE-2025-7026

    SMM Arbitrary Write via Unchecked RBX Pointer in CommandRcx0

    		8.2
    HighCVE-2025-7027

    SMM Arbitrary Write via Dual-Controlled Pointers in CommandRcx1

    		8.2
    HighCVE-2025-7028

    SMM Arbitrary Memory Access via Flash Handler with Unchecked FuncBlock Pointer

    		7.8
    Not ratedCVE-2010-1517

    GIGABYTE Dldrv2 ActiveX control: security vulnerability

    		—
    MediumCVE-2024-8105

    Insecure Platform Key (PK) used in UEFI system firmware signature

    also in 7 other products

    		6.4
    Not ratedCVE-2004-0328

    Gigabyte Gn-b46b: Authentication Bypass

    		—

    Products

    Products by Gigabyte
    Gigabyte Aorus Graphics Engine44
    Gigabyte App Center43
    Gigabyte OC Guru II44
    Gigabyte Xtreme Gaming Engine44