Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-90891

ASRock｜ASRock Polychrome SYNC/RGB software utility - Improper Access Control

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restricted I/O ports, resulting in a forced operating system reboot.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ASRock ASRock Polychrome SYNC/RGB for MB

Default version status: unaffected

  • 0 to ≤ 1.0.118affected

ASRock ASRock Polychrome SYNC/RGB for VGA

Default version status: unaffected

  • 0 to ≤ 2.0.219affected

References