← Database

CVE-2026-90891

MEDIUM CVSS: 5.5 Published: 2026-09-14 Modified: 2026-09-18

Description

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restricted I/O ports, resulting in a forced operating system reboot.

Affected Platforms

Unknown

Weakness Type

CWE-1256

References