Patchfirst: GIGABYTE vulnerabilitieshttps://patchfirst.co/vendor/gigabyte/New and newly exploited GIGABYTE CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMT[KEV] CVE-2018-19323: GIGABYTE Multiple Products Privilege Escalation Vulnerabilityhttps://patchfirst.co/cve/CVE-2018-19323/CVE-2018-19323#kevMon, 24 Oct 2022 00:00:00 GMTGIGABYTE · Multiple Products. In CISA KEV since 2022-10-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 8.4% (higher than 95% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1014 Rootkit. Priority 78.9 of 100.kevransomwarepublic-exploitT1068T1014[KEV] CVE-2018-19320: GIGABYTE Multiple Products Unspecified Vulnerabilityhttps://patchfirst.co/cve/CVE-2018-19320/CVE-2018-19320#kevMon, 24 Oct 2022 00:00:00 GMTGIGABYTE · Multiple Products. In CISA KEV since 2022-10-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 4.6% (higher than 91.6% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1014 Rootkit. Priority 76.8 of 100.kevransomwarepublic-exploitT1068T1014[KEV] CVE-2018-19321: GIGABYTE Multiple Products Privilege Escalation Vulnerabilityhttps://patchfirst.co/cve/CVE-2018-19321/CVE-2018-19321#kevMon, 24 Oct 2022 00:00:00 GMTGIGABYTE · Multiple Products. In CISA KEV since 2022-10-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 3.7% (higher than 89.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 76.4 of 100.kevransomwarepublic-exploitT1068[KEV] CVE-2018-19322: GIGABYTE Multiple Products Code Execution Vulnerabilityhttps://patchfirst.co/cve/CVE-2018-19322/CVE-2018-19322#kevMon, 24 Oct 2022 00:00:00 GMTGIGABYTE · Multiple Products. In CISA KEV since 2022-10-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 1.8% (higher than 78.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1082 System Information Discovery. Priority 74.2 of 100.kevransomwarepublic-exploitT1068T1082CVE-2017-3197: GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protectionhttps://patchfirst.co/cve/CVE-2017-3197/CVE-2017-3197Mon, 09 Jul 2018 00:00:00 GMTGIGABYTE · GB-BSi7H-6500. Not in CISA KEV. EPSS 5.6% (higher than 92.9% of CVEs). Priority 63.6 of 100.CVE-2017-3198: GIGABYTE BRIX UEFI firmware is not cryptographically signedhttps://patchfirst.co/cve/CVE-2017-3198/CVE-2017-3198Mon, 09 Jul 2018 00:00:00 GMTGIGABYTE · GB-BSi7H-6500. Not in CISA KEV. EPSS 1.6% (higher than 75.4% of CVEs). Priority 60.1 of 100.