Skip to content
OpenAdvisories

Vendor

GIGABYTE

11 known vulnerabilities.

Products

UEFI-GenericComponentSmmEntry 2 GB-BSi7H-6500 2 GB-BXi7-5775 2 Performance Library 1 MacroHub 1 UEFI-SmiFlash 1 MBStorage 1 UEFI-OverClockSmiHandler 1 intel 600 chipset Motherboard 1 intel 700 chipset Motherboard 1 intel 800 chipset Motherboard 1 AMD 600 chipset motherboard 1 AMD 800 chipset motherboard 1 Gigabyte Control Center 1 AMD TRX50 chipset motherboard 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.8
    CVE-2026-9492

    GIGABYTE｜Gigabyte Control Center - Improper Access Control

    The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIO_x64.sys b…

    GIGABYTE MBStorage
  • High 7.8
    CVE-2026-4416

    GIGABYTE｜Performance Library - Insecure Deserialization

    The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation.

    GIGABYTE Performance Library
  • High 8.1
    CVE-2026-4415

    GIGABYTE｜Gigabyte Control Center - Arbitrary File Write

    Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers can write arbitrary files to any location on the underlying operating system, leading to arbitrary c…

    GIGABYTE Gigabyte Control Center
  • High 7.8
    CVE-2026-0870

    GIGABYTE｜MacroHub - Local Privilege Escalation

    MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability. Due to the MacroHub application launching external applications with improper privileges, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges.

    GIGABYTE MacroHub
  • High 8.2
    CVE-2025-7026 Public exploit

    SMM Arbitrary Write via Unchecked RBX Pointer in CommandRcx0

    A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used as an unchecked pointer in the CommandRcx0 function. If the contents at RBX match certain expected values (e.g., '$DB$' or '2…

    GIGABYTE UEFI-GenericComponentSmmEntry
  • High 7.8
    CVE-2025-7028

    SMM Arbitrary Memory Access via Flash Handler with Unchecked FuncBlock Pointer

    A vulnerability in the Software SMI handler (SwSmiInputValue 0x20) allows a local attacker to supply a crafted pointer (FuncBlock) through RBX and RCX register values. This pointer is passed unchecked into multiple flash management functions (ReadFlash, Write…

    GIGABYTE UEFI-SmiFlash
  • High 8.2
    CVE-2025-7027

    SMM Arbitrary Write via Dual-Controlled Pointers in CommandRcx1

    A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control both the read and write addresses used by the CommandRcx1 function. The write target is derived from an unvalidated UEFI NVRAM variable (SetupXtuBufferAddres…

    GIGABYTE UEFI-GenericComponentSmmEntry
  • High 8.2
    CVE-2025-7029 Public exploit

    SMM Arbitrary Write via Unchecked OcHeader Buffer in Platform Configuration Handler

    A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used to derive pointers (OcHeader, OcData) passed into power and thermal configuration logic. These buffers are not validated befo…

    GIGABYTE UEFI-OverClockSmiHandler