Skip to content
Threat Feed
Subscribe

Product

MBStorage DRAM Lighting Control Module <= 26.02.10.01

1 brief RSS
high advisory

CVE-2026-9492 - Improper Access Control in Gigabyte Control Center MBStorage Module

An Improper Access Control vulnerability (CVE-2026-9492) in the MBStorage DRAM lighting control module of Gigabyte Control Center (GCC) allows authenticated local attackers to achieve kernel-level privileges by sending specific IOCTL commands to the `MyPortIO_x64.sys` driver, enabling arbitrary physical memory read/write.

Gigabyte Control Center +1 privilege-escalation vulnerability windows driver-vulnerability local-privilege-escalation
1t 1c