Insyde Software

Records127All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high91CVSS 7.0–8.9

Exploited now

Insyde Software records in CISA KEV

No Insyde Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Insydeh2o 66 records HIGH Kernel 33 records MEDIUM H2offt 2 records LOW H2oelv 1 record LOW H2ooae 1 record LOW H2opcm 1 record LOW H2osde 1 record LOW H2ouve 1 record LOW

Records

127 records

TI-2023-08797 CVE-2023-22614 · GHSA-7x7c-2rvc-69fh

An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5.

HIGH 71

An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00378 Published 2023-04-11 No fix listed CWE-787

TI-2022-16772 CVE-2022-36448 · GHSA-cw76-gh48-42j3

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

HIGH 71

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00335 Published 2022-09-28 No fix listed CWE-20

TI-2022-16681 CVE-2022-36338 · GHSA-hhx4-8rv9-cwrp

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

HIGH 71

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00463 Published 2022-09-23 No fix listed

TI-2022-16323 CVE-2022-35895 · GHSA-mm42-46m4-7pp9

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

HIGH 71

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00378 Published 2022-09-21 No fix listed CWE-787

TI-2022-15984 CVE-2022-35408 · GHSA-49c7-gf66-cc93

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

HIGH 71

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00367 Published 2022-09-22 No fix listed CWE-123

TI-2023-08799 CVE-2023-22616 · GHSA-f9jq-jhvv-4xmw

An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5.

HIGH 69

An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00369 Published 2023-04-12 No fix listed CWE-610

TI-2022-16324 CVE-2022-35896 · GHSA-hvm4-7p57-c7mx

An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde…

MEDIUM 60

An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00326 Published 2022-09-21 No fix listed CWE-20

TI-2022-16322 CVE-2022-35894 · GHSA-9w4x-cwgm-cchf

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

MEDIUM 60

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00335 Published 2022-09-22 No fix listed CWE-401

TI-2021-18465 CVE-2021-41842 · GHSA-v6qx-c5rh-4q6q

An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before…

MEDIUM 45

An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46, 5.4 before 05.43.46, and 5.5 before 05.51.45 in Insyde InsydeH2O.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01585 Published 2022-01-05 No fix listed

TI-2021-16172 CVE-2021-38578 · GHSA-grqq-3jqg-g95p

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.

MEDIUM 45

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01019 Published 2022-03-03 Partial fix CWE-124

TI-2020-04870 CVE-2020-5955 · GHSA-mf5j-wgq9-9jj2

An issue was discovered in Int15MicrocodeSmm in Insyde InsydeH2O before 2021-10-14 on…

MEDIUM 45

An issue was discovered in Int15MicrocodeSmm in Insyde InsydeH2O before 2021-10-14 on Intel client chipsets.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01413 Published 2021-11-03 No fix listed

TI-2023-20426 CVE-2023-39281 · GHSA-grf5-hh55-whxh

A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O…

MEDIUM 43

A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the DXE phase.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00505 Published 2023-11-01 No fix listed CWE-121

TI-2023-14777 CVE-2023-31041 · GHSA-5q2q-3px6-4458

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5.

LOW 39

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00365 Published 2023-08-14 No fix listed CWE-312

TI-2023-08795 CVE-2023-22612 · GHSA-rjr7-qrvq-fgxf

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5.

LOW 39

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00228 Published 2023-04-11 No fix listed CWE-787

TI-2021-16170 CVE-2021-38575 · GHSA-7cjm-mv56-4mg4

NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.

LOW 39

NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01994 Published 2021-12-01 Partial fix CWE-124

TI-2026-05682 CVE-2026-6484 · GHSA-gh4j-3cg6-8m5x

Lack of verified boot to certain FV may cause arbitrary code execution

LOW 38

In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00374 Published 2026-08-12 No fix listed CWE-1277

TI-2026-10971 CVE-2026-12855 · GHSA-w7c8-hp3q-qpv8

H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution.

LOW 37

Unvalidated memory boundary could result in arbitrary code execution.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00184 Published 2026-09-09 No fix listed CWE-20

TI-2026-05683 CVE-2026-6485 · GHSA-j5ph-5jrp-hf3x

UEFI BIOS embedded Shell can be used to bypass Secure Boot

LOW 37

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00179 Published 2026-09-09 No fix listed CWE-489

TI-2025-09584 CVE-2025-10451 · GHSA-2x38-j7v9-v23r

H19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write)

LOW 37

Unchecked output buffer may allowed arbitrary code execution in SMM and potentially result in SMM memory corruption.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00148 Published 2025-12-12 No fix listed CWE-787

TI-2025-03945 CVE-2025-4425 · GHSA-8mrm-vc83-24x3

SetupAutomationSmm: Stack overflow vulnerability in SMI handler

LOW 37

The vulnerability was identified in the code developed specifically for Lenovo.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.0019 Published 2025-07-30 Fixed in L05.05.40.011803.172079 CWE-121

TI-2025-03943 CVE-2025-4423 · GHSA-84fx-mhqp-q4r7

SetupAutomationSmm:Vulnerability in the SMM module allow attacker to write arbitrary code and lead to memory corruption

LOW 37

The vulnerability was identified in the code developed specifically for Lenovo.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.0019 Published 2025-07-30 Fixed in L05.05.40.011803.172079 CWE-119

TI-2025-03942 CVE-2025-4422 · GHSA-mpfc-4gcg-9qr5

EfiSmiServices : EfiPcdProtocol, SMM memory corruption vulnerabilities in SMM module

LOW 37

The vulnerability was identified in the code developed specifically for Lenovo.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00229 Published 2025-07-30 Fixed in L05.05.40.011803.172079 CWE-787

TI-2025-03941 CVE-2025-4421 · GHSA-39h4-c5qq-2w56

EfiSmiServices: gEfiSmmCpuProtocol, SMM memory corruption vulnerabilities in SMM module

LOW 37

The vulnerability was identified in the code developed specifically for Lenovo.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00244 Published 2025-07-30 Fixed in L05.05.40.011803.172079 CWE-787

TI-2025-03804 CVE-2025-4275 · GHSA-v9r5-7mg9-fwrr

SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate

LOW 37

A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00484 Published 2025-06-11 Fixed in 05.2A.16, 05.39.16 +4

TI-2024-32800 CVE-2024-49200 · GHSA-jx72-hjqg-63p5

An issue was discovered in AcpiS3SaveDxe and ChipsetSvcDxe in Insyde InsydeH2O with…

LOW 37

An issue was discovered in AcpiS3SaveDxe and ChipsetSvcDxe in Insyde InsydeH2O with kernel 5.2 though 5.7.

CVSS 3.1MEDIUM 6.4 Network Low privileges User interaction EPSS 0.00463 Published 2025-04-15 No fix listed CWE-787

Open these records in search →