insyde-software
Hardware Firmwarecommercial
Top products
Latest CVEs
The 15 most recently published vulnerabilities affecting insyde-software.
- CVE-2026-12855H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution.8.2
- CVE-2026-6485UEFI BIOS embedded Shell can be used to bypass Secure Boot8.2
- CVE-2021-38489HDD Password Stored In Plaintext8.2
- CVE-2021-43614VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution6.7
- CVE-2021-43613SysPasswordDxe: Password hashes are exposed in runtime UEFI variables, leading to escalation of privilege6.5
- CVE-2026-9805FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflow2.7
- CVE-2026-8810HDD Password leakage vulnerability6.9
- CVE-2026-6484Lack of verified boot to certain FV may cause arbitrary code execution8.2
- CVE-2025-12053egwindrvx64.sys is potentially vulnerable to a buffer overflow7.8
- CVE-2025-12052egwindrv.sys is potentially vulnerable to a buffer overflow.7.8
- CVE-2025-12051H2OFFT64.sys is potentially vulnerable to a buffer overflow.7.8
- CVE-2025-12050In H2OFFT32.sys is potentially vulnerable to a buffer overflow.7.8
- CVE-2025-10451H19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write)8.2
- CVE-2025-4410SetupUtility: A buffer overflow vulnerability leads to arbitrary code execution.7.5
- CVE-2025-4277Tcg2Smm: improper input validation may lead to arbitrary code execution7.5