CVE-2026-90891 — ASRock｜ASRock Polychrome SYNC/RGB software utility - Improper Access Control
ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOC…
Published: 2026-09-14 · CVSS: 6.8 · CVSS 4.0
ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restricted I/O ports, resulting in a forced operating system reboot.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7