CVE-2026-90890 — ASRock｜ASRock Polychrome SYNC/RGB software utility - Untrusted Pointer Dereference
ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially craft…
Published: 2026-09-14 · CVSS: 6.8 · CVSS 4.0
ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to dereference an unvalidated pointer, resulting in an operating system crash.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7