MSI vulnerabilities
We track 17 vulnerabilities in MSI products across 13 products. 17 are rated high or critical, and none are known to be exploited. The most recent was published on August 31, 2026.
Latest MSI vulnerabilities
- 8.8 High severity
A vulnerability was found in MSI Dragon Center up to 2.0.155.0.
A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLib_X64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize re
- 9.8 Critical severity
Radix AXE6600: Improper Neutralization of Special Elements used in an OS Command
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malic
- 9.8 Critical severity
Radix AXE6600: Improper Neutralization of Special Elements used in an OS Command
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject mal
- 9.8 Critical severity
Radix AXE6600: Improper Neutralization of Special Elements used in an OS Command
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for Telnet configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this v
- 9.8 Critical severity
Radix AXE6600: Improper Neutralization of Special Elements used in an OS Command
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vuln
- 9.8 Critical severity
Radix AXE6600: Improper Neutralization of Special Elements used in an OS Command
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg
- 9.8 Critical severity
Radix AXE6600: Improper Neutralization of Special Elements used in an OS Command
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg func
- 9.8 Critical severity
Radix AXE6600: Improper Neutralization of Special Elements used in an OS Command
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg functio
- 9.8 Critical severity
Radix AXE6600: Improper Neutralization of Special Elements used in an OS Command
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the dmz functio
- 9.8 Critical severity
Radix AXE6600: Improper Neutralization of Special Elements used in an OS Command
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the a
- 9.8 Critical severity
Radix AXE6600: Improper Neutralization of Special Elements used in an OS Command
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the urlfilter function to inject mal
- 9.8 Critical severity
Radix AXE6600: Improper Neutralization of Special Elements used in an OS Command
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attacke
- 7.8 High severity
MSI Center: Origin Validation Error
MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MSI Center. An attacker must first obtain the ability to execute low-privileg
- 7.5 High severity
Center: Exposure of Sensitive Information to an Unauthorized Actor
Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the 3DES-ECB encryption
- 7.5 High severity
Center: Exposure of Sensitive Information to an Unauthorized Actor
Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the MSI_SERVICE_2 pipe
- 8.2 High severity
intel_300: Write-what-where Condition
Micro-Star International Z-series motherboards (Z590, Z490, and Z790) and B-series motherboards (B760, B560, B660, and B460) with firmware 7D25v14, 7D25v17 to 7D25v19, and 7D25v1A to 7D25v1H was discovered to contain a write-what-where condition in the in the
- 7.8 High severity
MSI Afterburner: Incorrect Authorization
MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user.