CVE-2026-4416
HIGHGIGABYTE｜Performance Library - Insecure Deserialization
Title source: cnaDescription
The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation.
Scores
CVSS v3
7.8
EPSS
0.0002
EPSS Percentile
4.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-502
Status
published
Products (1)
GIGABYTE/Performance Library
< 25.12.31.01
Published
Mar 30, 2026
Tracked Since
Mar 30, 2026