CVE-2026-90891: Asrock Polychrome Sync/rgb For Mb

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restricted I/O ports, resulting in a forced operating system reboot.

Affected products

• Asrock Asrock Polychrome Sync/rgb For Mb: up to and including 1.0.118
• Asrock Asrock Polychrome Sync/rgb For Vga: up to and including 2.0.219

Published 2026-09-14. Last modified 2026-09-18.