IInsyde Software

Products

Exploited and recent CVEs

• CVE-2026-12855 High 8.2 H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution. 0.2%
• CVE-2026-6485 High 8.2 UEFI BIOS embedded Shell can be used to bypass Secure Boot 0.2%
• CVE-2021-38489 High 8.2 HDD Password Stored In Plaintext 0.2%
• CVE-2021-43614 Medium 6.7 VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution 0.2%
• CVE-2021-43613 Medium 6.5 SysPasswordDxe: Password hashes are exposed in runtime UEFI variables, leading to escalation of privilege 0.1%
• CVE-2026-9805 Low 2.7 FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflow 0.1%
• CVE-2026-8810 Medium 6.9 HDD Password leakage vulnerability 0.1%
• CVE-2026-6484 High 8.2 Lack of verified boot to certain FV may cause arbitrary code execution 0.4%
• CVE-2025-12053 High 7.8 egwindrvx64.sys is potentially vulnerable to a buffer overflow 0.2%
• CVE-2025-12052 High 7.8 egwindrv.sys is potentially vulnerable to a buffer overflow. 0.2%
• CVE-2025-12051 High 7.8 H2OFFT64.sys is potentially vulnerable to a buffer overflow. 0.2%
• CVE-2025-12050 High 7.8 In H2OFFT32.sys is potentially vulnerable to a buffer overflow. 0.2%
• CVE-2025-10451 High 8.2 H19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write) 0.1%
• CVE-2025-4410 High 7.5 SetupUtility: A buffer overflow vulnerability leads to arbitrary code execution. 0.1%
• CVE-2025-4277 High 7.5 Tcg2Smm: improper input validation may lead to arbitrary code execution 0.2%
• CVE-2025-4276 High 7.5 UsbCoreDxe: improper input validation may lead to arbitrary code execution 0.2%
• CVE-2025-4426 Medium 6.0 SetupAutomationSmm : SMRAM memory contents leak / information disclosure vulnerability in SMM module 0.2%
• CVE-2025-4425 High 8.2 SetupAutomationSmm: Stack overflow vulnerability in SMI handler 0.2%
• CVE-2025-4424 Medium 6.0 SetupAutomationSmm : Arbitrary calls to SmmSetVariable with unsanitised arguments in SMI handler 0.2%
• CVE-2025-4423 High 8.2 SetupAutomationSmm:Vulnerability in the SMM module allow attacker to write arbitrary code and lead to memory corruption 0.2%
• CVE-2025-4422 High 8.2 EfiSmiServices : EfiPcdProtocol, SMM memory corruption vulnerabilities in SMM module 0.2%
• CVE-2025-4421 High 8.2 EfiSmiServices: gEfiSmmCpuProtocol, SMM memory corruption vulnerabilities in SMM module 0.2%
• CVE-2025-4275 High 7.8 SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate 0.5%