Vulnerability index

Browse CVEs

99 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Insydeh2o MEDIUM 6.7
CVE-2024-55567

Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 before 05.55.01, 5.6 before 05.62.01, and …

Fix: 5.4.05.47.01 / 5.5.05.55.01+
Fix from $1,600 2025-06-12
Kernel HIGH 7.9
CVE-2024-52880

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.5…

Fix: 5.29.50 / 5.38.50+
Fix from $1,950 2025-05-15
Insydeh2o HIGH 7.5
CVE-2024-52879

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.5…

Fix: 5.2.05.29.50 / 5.3.05.38.50+
Fix from $1,950 2025-05-15
Insydeh2o HIGH 7.5
CVE-2024-52877

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.5…

Fix: 5.2.05.29.50 / 5.3.05.38.50+
Fix from $1,950 2025-05-15
Insydeh2o HIGH 7.5
CVE-2024-52878

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.5…

Fix: 5.2.05.29.50 / 5.3.05.38.50+
Fix from $1,950 2025-05-15
Kernel MEDIUM 6.4
CVE-2024-49200

An issue was discovered in AcpiS3SaveDxe and ChipsetSvcDxe in Insyde InsydeH2O with kernel 5.2 though 5.7. A potential DXE memory corruption vulnerab…

Mitigation only
Fix from $1,600 2025-04-15
Insydeh2o HIGH 7.4
CVE-2024-25079

A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.…

Fix: 5.29.09 / 5.38.09+
Fix from $1,950 2024-05-15
Kernel HIGH 7.4
CVE-2024-25078

A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel 5.2: IB19130163 in 05.29.07, kernel 5.3: IB19130163 …

Fix: 5.29.07 / 5.38.07+
Fix from $1,950 2024-05-15
Kernel MEDIUM 6.3
CVE-2023-47252

An issue was discovered in PnpSmm in Insyde InsydeH2O with kernel 5.0 through 5.6. There is a possible out-of-bounds access in the SMM communication …

Fix: 5.28.45 / 5.37.45+
Fix from $1,600 2024-04-26
Kernel MEDIUM 5.3
CVE-2022-46897

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The CapsuleIFWUSmm driver does not check the return value from a method or f…

Fix: after 5.5
Fix from $1,600 2024-04-22
Insydeh2o HIGH 7.8
CVE-2023-39283

An SMM memory corruption vulnerability in the SMM driver (SMRAM write) in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows atta…

Fix: after 5.5
Fix from $1,950 2023-11-02
Insydeh2o MEDIUM 5.5
CVE-2023-39284

An issue was discovered in IhisiServicesSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There are arbitrary calls to SetVariable with unsanitize…

Fix: 5.2.05.28.33 / 5.3.05.37.33+
Fix from $1,600 2023-11-02
Insydeh2o CRITICAL 9.8
CVE-2023-39281

A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrar…

Mitigation only
Fix from $2,300 2023-11-01
Insydeh2o MEDIUM 5.3
CVE-2023-30633

An issue was discovered in TrEEConfigDriver in Insyde InsydeH2O with kernel 5.0 through 5.5. It can report false TPM PCR values, and thus mask malwar…

Fix: 5.3.05.37.17 / 5.4.05.45.17+
Fix from $1,600 2023-10-19
Insydeh2o HIGH 7.8
CVE-2023-34195

An issue was discovered in SystemFirmwareManagementRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. The implementation of the GetImage met…

Fix: 5.2.05.28.22 / 5.3.05.37.22+
Fix from $1,950 2023-09-18
H2offt HIGH 7.1
CVE-2021-33834

An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and co…

Mitigation only
Fix from $1,950 2023-09-08
Insydeh2o MEDIUM 5.5
CVE-2023-27471

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. UEFI implementations do not correctly protect and validate information conta…

Mitigation only
Fix from $1,600 2023-08-18
Insydeh2o HIGH 7.5
CVE-2023-31041

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information could optionally be stored in …

Mitigation only
Fix from $1,950 2023-08-14
Insydeh2o MEDIUM 5.5
CVE-2023-27373

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-…

Mitigation only
Fix from $1,600 2023-08-07
Kernel MEDIUM 6.5
CVE-2023-28468

An issue was discovered in FvbServicesRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. The FvbServicesRuntimeDxe SMM module exposes an SMI…

Fix: after 5.5
Fix from $1,600 2023-08-03
Insydecrpkg HIGH 7.1
CVE-2023-25600

An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bounds memory r…

Fix: 01.01.04.0016+
Fix from $1,950 2023-08-03
Insydeh2o HIGH 7.8
CVE-2023-22616

An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5. The Save State register is not checked before use. The IhisiSmm driver does …

Fix: after 5.5
Fix from $1,950 2023-04-12
Insydeh2o MEDIUM 5.5
CVE-2022-24350

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI function 0x17 verifies that the output buffer lies within …

Fix: after 5.5
Fix from $1,600 2023-04-12
Insydeh2o HIGH 8.8
CVE-2023-22613

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attacker-controlled address. An at…

Mitigation only
Fix from $1,950 2023-04-11
Insydeh2o HIGH 8.8
CVE-2023-22612

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an Insyde SMI handler with malfor…

Mitigation only
Fix from $1,950 2023-04-11
Insydeh2o HIGH 8.8
CVE-2023-22614

An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard update…

No fix yet
Fix from $1,950 2023-04-11
Insydeh2o HIGH 8.4
CVE-2023-22615

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may corrupt SMRAM. An attacker can p…

Mitigation only
Fix from $1,950 2023-04-11
Insydeh2o HIGH 7.0
CVE-2022-32477

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the FvbServicesRuntimeDxe shared buffer used by SMM and non-S…

Fix: 5.2.05.27.27 / 5.3.05.36.27+
Fix from $1,950 2023-02-15
Insydeh2o HIGH 7.0
CVE-2022-32469

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the PnpSmm shared buffer used by SMM and non-SMM code could c…

Fix: 5.2.05.27.27 / 5.3.05.36.27+
Fix from $1,950 2023-02-15
Insydeh2o HIGH 7.0
CVE-2022-32475

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the VariableRuntimeDxe shared buffer used by SMM and non-SMM …

Fix: 5.2.05.27.27 / 5.3.05.36.27+
Fix from $1,950 2023-02-15