CVE-2019-16098

CVE-2019-16098 is a high-severity vulnerability in the RTCore64.sys and RTCore32.sys drivers used by Micro-Star MSI Afterburner 4.6.2.15658. It allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. This flaw can lead to privilege escalation, arbitrary code execution, and information disclosure, and can also bypass Microsoft's driver-signing policy. With a CVSS score of 7.8 (HIGH) and a FAUCET Risk Score of 98/100, the vulnerability is easily exploitable with low attack complexity and user privileges, posing a significant risk. While no public exploit code is available on Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered substantial community discussion and media coverage, including reports of the BlackByte ransomware abusing the legitimate driver to disable security products.