MEDIUM 6.8 NVD

CVE-2026-90891

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a spec

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restricted I/O ports, resulting in a forced operating system reboot.

References

https://www.twcert.org.tw/en/cp-139-11204-6b1c6-2.html
https://www.twcert.org.tw/tw/cp-132-11205-f6677-1.html

Published: 2026-09-14 · Source: NVD · Feed updated: 2026-09-15

This medium severity vulnerability with a CVSS score of 6.8 was published on 2026-09-14 via NVD.

vulnfeed aggregates 10822 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.