<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: asrock</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-14032: ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM.</title><link>https://patchthecve.com/cve/CVE-2020-14032.html</link><guid>https://patchthecve.com/cve/CVE-2020-14032.html</guid><pubDate>Wed, 17 Jun 2026 02:54:08 +0000</pubDate><description>CRITICAL 9.8: ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM.</description></item><item><title>CVE-2020-15368: AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by t</title><link>https://patchthecve.com/cve/CVE-2020-15368.html</link><guid>https://patchthecve.com/cve/CVE-2020-15368.html</guid><pubDate>Wed, 17 Jun 2026 02:56:34 +0000</pubDate><description>MEDIUM 5.5: AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3.</description></item><item><title>CVE-2018-10712: The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.</title><link>https://patchthecve.com/cve/CVE-2018-10712.html</link><guid>https://patchthecve.com/cve/CVE-2018-10712.html</guid><pubDate>Wed, 17 Jun 2026 01:34:33 +0000</pubDate><description>HIGH 7.8: The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code </description></item><item><title>CVE-2018-10711: The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.</title><link>https://patchthecve.com/cve/CVE-2018-10711.html</link><guid>https://patchthecve.com/cve/CVE-2018-10711.html</guid><pubDate>Wed, 17 Jun 2026 01:34:33 +0000</pubDate><description>HIGH 7.8: The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machine Specific Registers (MSRs). This could be leveraged to execute arbitrary ring-0</description></item><item><title>CVE-2018-10710: The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.</title><link>https://patchthecve.com/cve/CVE-2018-10710.html</link><guid>https://patchthecve.com/cve/CVE-2018-10710.html</guid><pubDate>Wed, 17 Jun 2026 01:34:33 +0000</pubDate><description>HIGH 7.1: The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate priv</description></item><item><title>CVE-2018-10709: The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.</title><link>https://patchthecve.com/cve/CVE-2018-10709.html</link><guid>https://patchthecve.com/cve/CVE-2018-10709.html</guid><pubDate>Wed, 17 Jun 2026 01:34:33 +0000</pubDate><description>HIGH 7.8: The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write CR register values. This could be leveraged in a number of ways to ultimately run code</description></item></channel></rss>