Browse CVEs

MEDIUM 6.4 CVE-2024-49200 An issue was discovered in AcpiS3SaveDxe and ChipsetSvcDxe in Insyde InsydeH2O with kernel 5.2 though 5.7. A potential DXE memory corruption vulnerab… Kernel Mitigation only Fix from $1,6002025-04-15 CRITICAL 9.8 CVE-2023-39281 A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrar… Insydeh2o Mitigation only Fix from $2,3002023-11-01 HIGH 7.1 CVE-2021-33834 An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and co… H2offt Mitigation only Fix from $1,9502023-09-08 MEDIUM 5.5 CVE-2023-27471 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. UEFI implementations do not correctly protect and validate information conta… Insydeh2o Mitigation only Fix from $1,6002023-08-18 HIGH 7.5 CVE-2023-31041 An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information could optionally be stored in … Insydeh2o Mitigation only Fix from $1,9502023-08-14 MEDIUM 5.5 CVE-2023-27373 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-… Insydeh2o Mitigation only Fix from $1,6002023-08-07 HIGH 8.8 CVE-2023-22613 An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attacker-controlled address. An at… Insydeh2o Mitigation only Fix from $1,9502023-04-11 HIGH 8.8 CVE-2023-22612 An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an Insyde SMI handler with malfor… Insydeh2o Mitigation only Fix from $1,9502023-04-11 HIGH 8.8 CVE-2023-22614 An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard update… Insydeh2o No fix yet Fix from $1,9502023-04-11 HIGH 8.4 CVE-2023-22615 An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may corrupt SMRAM. An attacker can p… Insydeh2o Mitigation only Fix from $1,9502023-04-11 HIGH 7.5 CVE-2020-5953 A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT … Insydeh2o Mitigation only Fix from $1,9502022-02-03