CVE-2018-19321

GIGABYTE drivers allowed local privilege escalation via arbitrary memory read/write, enabling ransomware entry.

GIGABYTE's GPCIDrv and GDrv drivers exposed arbitrary physical memory access, allowing local attackers to escalate privileges. This is critical for DIBs because it provides a direct path for ransomware to gain system control, violating CMMC/NIST 800-171 requirements for patch management and access control. Organizations must verify GIGABYTE hardware and software are patched and avoid relying on unpatched drivers.

Shame score — A privilege escalation vulnerability in widely shipped drivers that was actively exploited in the wild and linked to ransomware, indicating severe negligence and avoidable risk.