Skip to content
English

Products › Brands

Brand

GIGABYTE: actively exploited vulnerabilities

4 vulnerabilities in GIGABYTE products (App Center / AORUS (pilote GDrv)) are in CISA’s catalog of exploited vulnerabilities. Last added: October 24, 2022.

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one GIGABYTE category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • App Center / AORUS (pilote GDrv) 4 vulnerabilities · Hardware and firmware

Name used by CISA: GIGABYTE. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this GIGABYTE list.

  1. Rank 1GIGABYTE App Center / AORUS (pilote GDrv)

    CVE-2018-19323

    RansomwareCVE from 2018, added in 2022

    GIGABYTE Multiple Products Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 24, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)
  2. Rank 2GIGABYTE App Center / AORUS (pilote GDrv)

    CVE-2018-19320

    RansomwareCVE from 2018, added in 2022

    GIGABYTE Multiple Products Unspecified Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 24, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)
  3. Rank 3GIGABYTE App Center / AORUS (pilote GDrv)

    CVE-2018-19321

    RansomwareCVE from 2018, added in 2022

    GIGABYTE Multiple Products Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 24, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)
  4. Rank 4GIGABYTE App Center / AORUS (pilote GDrv)

    CVE-2018-19322

    RansomwareCVE from 2018, added in 2022

    GIGABYTE Multiple Products Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 24, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.