Vulnerabilities

TI-2026-61764 CVE-2026-90891 · GHSA-g9vq-5jvw-3c63

ASRock｜ASRock Polychrome SYNC/RGB software utility - Improper Access Control

LOW 29

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00125 Published 2026-09-14 No fix listed CWE-1256

TI-2026-61763 CVE-2026-90890 · GHSA-rv3j-88mf-j5v9

ASRock｜ASRock Polychrome SYNC/RGB software utility - Untrusted Pointer Dereference

LOW 29

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00136 Published 2026-09-14 No fix listed CWE-822

TI-2025-13067 CVE-2025-14304 · GHSA-phpw-4hqh-3488

ASRock, ASRockRack, ASRockInd｜Motherboard - Protection Mechanism Failure

LOW 33

Certain motherboard models developed by ASRock and its subsidiaries, ASRockRack and ASRockInd.

CVSS 4.0HIGH 7.0 Physical No auth No interaction EPSS 0.00353 Published 2025-12-17 No fix listed CWE-693

TI-2020-10996 CVE-2020-14032 · GHSA-hh7h-prf8-f6h7

ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM.

MEDIUM 46

ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02115 Published 2021-07-23 No fix listed CWE-269

TI-2020-12115 CVE-2020-15368 · GHSA-7387-h76h-9m29

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space…

MEDIUM 60

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.01349 Published 2020-06-29 No fix listed CWE-269

TI-2018-07578 CVE-2018-10712 · GHSA-5vcg-x4hx-4gmx

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1…

LOW 37

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read/write data from/…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01346 Published 2018-10-30 No fix listed CWE-732

TI-2018-07577 CVE-2018-10711 · GHSA-wh9q-36f9-vj37

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1…

LOW 37

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machin…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01545 Published 2018-10-30 No fix listed CWE-20

TI-2018-07576 CVE-2018-10710 · GHSA-85p3-9hqw-5w58

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1…

LOW 33

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write arbitr…

CVSS 3.0HIGH 7.1 Local Low privileges No interaction EPSS 0.00982 Published 2018-10-30 No fix listed CWE-732

TI-2018-07575 CVE-2018-10709 · GHSA-v8wr-25mj-7jf2

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1…

LOW 36

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write CR reg…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.0117 Published 2018-10-30 No fix listed CWE-732

Vulnerabilities

Filters