Gigabyte vulnerabilities
We track 8 vulnerabilities in Gigabyte products across 10 products. 8 are rated high or critical, and 4 have been exploited in real attacks. The most recent was published on July 13, 2026.
Latest Gigabyte vulnerabilities
- 7.8 High severity
MBStorage: Exposed IOCTL with Insufficient Access Control
The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIO_x64.sys bu
- 7.8 High severity
Performance Library: Deserialization of Untrusted Data
The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation.
- 9.8 Critical severity
Gigabyte Control Center: Out-of-bounds Write
Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers can write arbitrary files to any location on the underlying operating system, leading to arbitrary co
- 7.8 High severity
MacroHub: Execution with Unnecessary Privileges
MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability. Due to the MacroHub application launching external applications with improper privileges, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges.
- 9.8 Critical severity
GIGABYTE Multiple Products Privilege Escalation Exploited
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).
- 7.8 High severity
GIGABYTE Multiple Products Code Execution Exploited
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read/write data from/to IO ports. This could be leveraged in a
- 7.8 High severity
GIGABYTE Multiple Products Privilege Escalation Exploited
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be levera
- 7.8 High severity
GIGABYTE Multiple Products Unspecified Exploited
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control