Insyde Software InsydeH2O

CVE-2026-12855 High 8.2 H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution. 0.2%
CVE-2026-6485 High 8.2 UEFI BIOS embedded Shell can be used to bypass Secure Boot 0.2%
CVE-2021-38489 High 8.2 HDD Password Stored In Plaintext 0.2%
CVE-2021-43614 Medium 6.7 VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution 0.2%
CVE-2021-43613 Medium 6.5 SysPasswordDxe: Password hashes are exposed in runtime UEFI variables, leading to escalation of privilege 0.1%
CVE-2026-9805 Low 2.7 FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflow 0.1%
CVE-2026-6484 High 8.2 Lack of verified boot to certain FV may cause arbitrary code execution 0.4%
CVE-2025-10451 High 8.2 H19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write) 0.1%
CVE-2025-4410 High 7.5 SetupUtility: A buffer overflow vulnerability leads to arbitrary code execution. 0.1%
CVE-2025-4277 High 7.5 Tcg2Smm: improper input validation may lead to arbitrary code execution 0.2%
CVE-2025-4276 High 7.5 UsbCoreDxe: improper input validation may lead to arbitrary code execution 0.2%
CVE-2025-4426 Medium 6.0 SetupAutomationSmm : SMRAM memory contents leak / information disclosure vulnerability in SMM module 0.2%
CVE-2025-4425 High 8.2 SetupAutomationSmm: Stack overflow vulnerability in SMI handler 0.2%
CVE-2025-4424 Medium 6.0 SetupAutomationSmm : Arbitrary calls to SmmSetVariable with unsanitised arguments in SMI handler 0.2%
CVE-2025-4423 High 8.2 SetupAutomationSmm:Vulnerability in the SMM module allow attacker to write arbitrary code and lead to memory corruption 0.2%
CVE-2025-4422 High 8.2 EfiSmiServices : EfiPcdProtocol, SMM memory corruption vulnerabilities in SMM module 0.2%
CVE-2025-4421 High 8.2 EfiSmiServices: gEfiSmmCpuProtocol, SMM memory corruption vulnerabilities in SMM module 0.2%
CVE-2025-4275 High 7.8 SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate 0.5%