Vulnerability index

Browse CVEs

11 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Kernel MEDIUM 6.4
CVE-2024-49200

An issue was discovered in AcpiS3SaveDxe and ChipsetSvcDxe in Insyde InsydeH2O with kernel 5.2 though 5.7. A potential DXE memory corruption vulnerab…

Mitigation only
Fix from $1,600 2025-04-15
Insydeh2o CRITICAL 9.8
CVE-2023-39281

A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrar…

Mitigation only
Fix from $2,300 2023-11-01
H2offt HIGH 7.1
CVE-2021-33834

An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and co…

Mitigation only
Fix from $1,950 2023-09-08
Insydeh2o MEDIUM 5.5
CVE-2023-27471

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. UEFI implementations do not correctly protect and validate information conta…

Mitigation only
Fix from $1,600 2023-08-18
Insydeh2o HIGH 7.5
CVE-2023-31041

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information could optionally be stored in …

Mitigation only
Fix from $1,950 2023-08-14
Insydeh2o MEDIUM 5.5
CVE-2023-27373

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-…

Mitigation only
Fix from $1,600 2023-08-07
Insydeh2o HIGH 8.8
CVE-2023-22613

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attacker-controlled address. An at…

Mitigation only
Fix from $1,950 2023-04-11
Insydeh2o HIGH 8.8
CVE-2023-22612

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an Insyde SMI handler with malfor…

Mitigation only
Fix from $1,950 2023-04-11
Insydeh2o HIGH 8.8
CVE-2023-22614

An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard update…

No fix yet
Fix from $1,950 2023-04-11
Insydeh2o HIGH 8.4
CVE-2023-22615

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may corrupt SMRAM. An attacker can p…

Mitigation only
Fix from $1,950 2023-04-11
Insydeh2o HIGH 7.5
CVE-2020-5953

A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT …

Mitigation only
Fix from $1,950 2022-02-03